[deana]

Hi all,

I'm new to all this, so I'm not sure what info to post. I'll tell ya what I know and we can go from there.

First the technicalities:

BES 4.1.4.28 with GroupWise 7.0.2HP, 45 users for e-mail connectivity only, no apps or anything...Specific user has an 8830 and a Mac on his desk, if that's relevant.

We're not exactly sure when, but within at least the last few weeks, the following started showing up in our mail exchange logs:

Dec 2 13:38:08 smtp postfix/smtp[6513]: E233912C80: to=<661#######@vtext.com>, relay=smtp-bb.vtext.com[69.78.128.213], delay=333, status=sent (250 ok: Message 18499082 accepted)
Dec 2 13:39:45 smtp postfix/smtp[5994]: D47E212CFB: to=<661#######@vtext.com>, relay=smtp-bb.vtext.com[69.78.128.213], delay=268, status=sent (250 ok: Message 18403216 accepted)
Dec 2 13:39:45 smtp postfix/smtp[6500]: CEABE109C8: to=<661#######@vtext.com>, relay=smtp-sl.vtext.com[69.78.67.53], delay=295, status=sent (250 ok: Message 14671204 accepted)
Dec 2 13:42:59 smtp postfix/cleanup[6474]: 1C5F212CD2: hold: header Received: from mailout.domain.org.org (filter.domain.org [XXX.XXX.X.XX])??by smtp.domain.org (Postfix) with SMTP id 1C5F212CD2??for <661#######@vtext.com>; Tue, 2 Dec 2008 13:42:59 -0800 (PST) from filter.domain.org[XXX.XXX.X.XX]; from=<SYNCLOGC@domain.org> to=<661#######@vtext.com> proto=SMTP helo=<mailout.domain.org>


*I've obviously changed some info to protect the innocent. Here's the key:

####### = phone number of the device
filter.domain.org = mail proxy
mailout.domain.org = outgoing mail exchange server
XXX.XXX.X.XX = IP address of the mail proxy
smtp.domain.org = smtp server
= the account the messages are coming from inside

These log entries are specific to one user and he swears he hasn't touched anything he shouldn't on the device.

Can any one enlighten me as to where these are coming from or what suddenly caused this to start happening?

I hope all this makes sense. If this isn't the right place to ask, or if additional info is needed, please let me know.

Any assistance is greatly appreciated.

Thanks!
-Deana

[freakinvibe]

Do you see any symptoms (i.e. mail not arriving)? Can you also indicate which log file this is from?

[deana]

As far as the user and I know, there hasn't been any distruption of services at all. The user, and I, were completely unaware of anything. Our lead engineer noticed these entries in the Postfix log on our Linux mail relay server, specifically var/log/mail, when looking at another mail issue.

Does that help?

[freakinvibe]

vtext.com is a Verizon Service to send text messages (SMS). So the user is probably sending/receiving text message via

https://text.vzw.com/customer_site/jsp/messaging_lo.jsp

The first 3 log entries don't show any errors, just the successful sending of messages.

[deana]

That's what we were thinking, but the user denies doing anything different. I personally don't think this is catastropic in any way, but the lead wanted it researched...