a piece of maillog

[RamlazanC]

could anyone tell me what happens here ?
actually i want to know is this sending this email by my smtp server?

thanks by advance

Feb 23 14:49:36 nsxxxxxx /var/qmail/bin/relaylock[9836]: /var/qmail/bin/relaylock: mail from 187.5.81.179:51251 (187-5-81-179.bsaco701.dsl.brasiltelecom.net.br)
Feb 23 14:49:37 nsxxxxxx qmail-queue-handlers[9838]: Handlers Filter before-queue for qmail started ...
Feb 23 14:49:37 nsxxxxxx qmail-queue-handlers[9838]: from=Frederick59c@brasiltelecom.net.br
Feb 23 14:49:37 nsxxxxxx qmail-queue-handlers[9838]: to=info@xxxxxxxxxx.be
Feb 23 14:49:37 nsxxxxxx qmail-queue-handlers[9838]: handlers_stderr: SKIP
Feb 23 14:49:37 nsxxxxxx qmail-queue-handlers[9838]: SKIP during call 'limit-out' handler
Feb 23 14:49:37 nsxxxxxx qmail-queue-handlers[9838]: handlers_stderr: SKIP
Feb 23 14:49:37 nsxxxxxx qmail-queue-handlers[9838]: SKIP during call 'check-quota' handler
Feb 23 14:49:37 nsxxxxxx qmail-queue-handlers[9838]: starter: submitter[9841] exited normally
Feb 23 14:49:37 nsxxxxxx qmail: 1424699377.876704 new msg 77463900
Feb 23 14:49:37 nsxxxxxx qmail: 1424699377.876725 info msg 77463900: bytes 3218 from <frederick59c@brasiltelecom.net.br> qp 9841 uid 2020
Feb 23 14:49:37 nsxxxxxx qmail: 1424699377.946722 starting delivery 287: msg 77463900 to local xxxxxxxxxx.be-info@xxxxxxxxxx.be
Feb 23 14:49:37 nsxxxxxx qmail: 1424699377.946742 status: local 1/10 remote 0/20
Feb 23 14:49:37 nsxxxxxx qmail-local-handlers[9842]: Handlers Filter before-local for qmail started ...
Feb 23 14:49:37 nsxxxxxx qmail-local-handlers[9842]: from=frederick59c@brasiltelecom.net.br
Feb 23 14:49:37 nsxxxxxx qmail-local-handlers[9842]: to=info@xxxxxxxxxx.be
Feb 23 14:49:37 nsxxxxxx qmail-local-handlers[9842]: mailbox: /var/qmail/mailnames/xxxxxxxxxx.be/info
Feb 23 14:49:37 nsxxxxxx qmail: 1424699377.993431 delivery 287: success: did_0+0+2/
Feb 23 14:49:37 nsxxxxxx qmail: 1424699377.993453 status: local 0/10 remote 0/20
Feb 23 14:49:37 nsxxxxxx qmail: 1424699377.993463 end msg 77463900

 

[abdi]

Looks to me like email was successfully delivered to inf@xxxx.be

 

[RamlazanC]

thanks for answer
is this send by this smtp server ?

 

[RamlazanC]

i have set authentication on ? why isit possible to send email from someone in brasil?

 

[abdi]

Email was sent from frederick59c@brasiltelecom.net.br to your local mailbox info@xxx.be.
As I guess you are not the one hosting frederick59c@brasiltelecom.net.br, or are you?

 

[RamlazanC]

true i'm not hosting brasiltelecom.net.br
so why is this email shown in here (log). there are lot emails coming to info@xxx.be
why are they not shown in here?

 

[abdi]

Sender's emails reflect in the logs, its normal!!

 

[RamlazanC]

Thanks abdi for reply

there are lot emails coming to info@xxx.be
why are they not shown in here?

do you have any answers for this?

 

[abdi]

If they are SPAM and are coming from a compromised Form then chances are they don't have valid headers that define senders which could be the reason why you can't see the senders in the logs.

 

[RamlazanC]

Hi abdi
Ok i tried to understand, all receiving emails to info@xxxxxxx.be should comes in the maillog if headers are valid?
and where should come the logs on sending emails by submission or smtp port?

 

[abdi]

For SMTP, its the same log file ..
For PHP's mail function "mail()" that depends on the variable you set for mail.log in your php.ini
More here: http://php.net/manual/en/mail.configuration.php#ini.mail.log

 

[RamlazanC]

thank you abdi it's now clear for me.

 

[abdi]

Sure no problem and your most welcome!