This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Kiwi Syslog SMTP Protocol Error

immortalsolitude over 3 years ago

I have configured Kiwi syslog to send error logs from servers however there is one device that is configured to receive syslog and write to file but there are not alerts set up to send email yet i am seeing this

PI Message to: yyy@xxx.com

PI Message from: xxx@xxx.com

PI Subject: Syslog message from 10.10.0.1
PI Date: Wed, 02 Dec 2020 18:27:53 -0500
PI Mail error: SMTP protocol error. 550 5.1.0 Sender is not allowed to send from xxx.com (R2).

10.10.0.1 is not configured to send any email alerts. How do i stop this queue , syslog is getting flooded and preventing other emails from being sent.

Parents

0 kstone over 3 years ago

If that message is from a remote server(not the Kiwi server) then there is something that is trying to send email. If that is the Kiwi server the email address being used doesn't have the permissions to send email through that SMTP server.
You can set a rule in Kiwi to 'drop' those messages by matching on some unique text in the message and then using the 'stop processing' action.
The best solution is always to fix it at the source but if that can't be done the filter could be a workaround.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 kstone over 3 years ago

If that message is from a remote server(not the Kiwi server) then there is something that is trying to send email. If that is the Kiwi server the email address being used doesn't have the permissions to send email through that SMTP server.
You can set a rule in Kiwi to 'drop' those messages by matching on some unique text in the message and then using the 'stop processing' action.
The best solution is always to fix it at the source but if that can't be done the filter could be a workaround.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 immortalsolitude over 3 years ago in reply to kstone

It definitely is something else that is trying to send the email but why is kiwi logging it? The email in the kiwi syslog is configured to use a different email server and email address to send outbound email.
Cancel
Vote Up 0 Vote Down

Cancel
0 kstone over 3 years ago in reply to immortalsolitude

Is the server creating the message Windows or Linux?

If Linux check the syslog config in /etc. If Windows is it running a mail client or scripts that might send emails?
Cancel
Vote Up 0 Vote Down

Cancel