Hi postfix profis,
I'm running postfix 2.1.5-9 for several domains. Of course it handles the
workload with ease, but when I tail the mail.log the screen scrolls
constantly as it's just rejecting spam every second. The good thing is that
all these accesses are rejected, and logged. Also good is that postfix seems
to do most of the rejecting before handing off to amavis-new, for example, so
the CPU is used fairly efficiently I suspect. The bad thing is that this
still seems as though this amount of data processing must surely be excessive
for just a couple of domains, and and I'm wondering if I can reduce that
overhead any more. I've attached my main and master cf's and a few hundred
lines of mail.log output which shows less than one minutes worth of logging,
with the vain hope that someone might have some constructive criticisms to
offer with which to improve this setup.
Thanks in advance for any (helpful ;) comments.
--
Richard Foley
Ciao - shorter than aufwiedersehen
http://www.rfi.net/
# See /usr/share/postfix/main.cf.dist for a commented, more complete version
#
# postfix config - postfix reload
#
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
# appending .domain is the MUA's job.
append_dot_mydomain = no
append_at_myorigin = no
# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h
myhostname = blix.rfi.net
mydomain = rfi.net
# alias_maps = pcre:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
alias_database = alias_maps
myorigin = /etc/mailname
mydestination = $myhostname, $mydomain, localhost.$mydomain, localhost
relayhost =
mynetworks = 127.0.0.0/8, 195.10.223.184
mailbox_size_limit = 0
home_mailbox = mbox
# mailbox_command =
mailbox_command = /usr/bin/procmail -t
recipient_delimiter = +
inet_interfaces = all
# rfi
virtual_alias_domains = hash:/etc/postfix/virtual_alias_domains
virtual_alias_maps = pcre:/etc/postfix/virtual_alias_maps
# relay_domains = lists.nakedeurope.org
# mailman
# transport_maps = hash:/etc/postfix/transport
# mailman_destination_recipient_limit = 1
# sasl
smtpd_sasl_local_domain =
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_tls_auth_only = no
smtp_use_tls = yes
smtpd_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
# clamav + spamassassin
# content_filter = smtp-amavis:[127.0.0.1]:10024
content_filter = amavisfeed:[127.0.0.1]:10024
# receive_override_options = no_address_mappings
# http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt
smtpd_helo_required = yes
disable_vrfy_command = yes
smtpd_delay_reject = yes
parent_domain_matches_subdomains = smtpd_access_maps
header_checks = pcre:/etc/postfix/header_checks
# mime_header_checks = pcre:/etc/postfix/mime_header_checks
# body_checks = pcre:/etc/postfix/body_checks
smtpd_data_restrictions =
reject_unauth_pipelining
permit
smtpd_sender_restrictions =
reject_non_fqdn_sender
reject_unknown_sender_domain
reject_rhsbl_sender dsn.rfc-ignorant.org
permit
smtpd_recipient_restrictions =
reject_non_fqdn_recipient
reject_non_fqdn_sender
reject_unknown_sender_domain
reject_unknown_recipient_domain
permit_mynetworks
permit_sasl_authenticated
reject_unauth_destination
check_recipient_access pcre:/etc/postfix/recipient_checks
reject_multi_recipient_bounce
check_helo_access hash:/etc/postfix/helo_checks
reject_non_fqdn_hostname
reject_invalid_hostname
check_sender_access hash:/etc/postfix/sender_checks
check_client_access pcre:/etc/postfix/client_checks
# reject_rbl_client cbl.abuseat.org
# reject_rbl_client list.dsbl.org
# reject_rbl_client sbl.spamhaus.org
# reject_rbl_client pbl.spamhaus.org
# NB. zen.spamhaus incorporates the CBL list from abuseat.org, as well as
all
# the zen.spamhaus.org SBL/XBL/PBL lists
reject_rbl_client zen.spamhaus.org
reject_rbl_client bl.spamcop.net
reject_rbl_client dnsbl.njabl.org
permit
#
# Postfix master process configuration file. Each logical line
# describes how a Postfix daemon program should be run.
#
# A logical line starts with non-whitespace, non-comment text.
# Empty lines and whitespace-only lines are ignored, as are comment
# lines whose first non-whitespace character is a `#'.
# A line that starts with whitespace continues a logical line.
#
# The fields that make up each line are described below. A "-" field
# value requests that a default value be used for that field.
#
# Service: any name that is valid for the specified transport type
# (the next field). With INET transports, a service is specified as
# host:port. The host part (and colon) may be omitted. Either host
# or port may be given in symbolic form or in numeric form. Examples
# for the SMTP server: localhost:smtp receives mail via the loopback
# interface only; 10025 receives mail on port 10025.
#
# Transport type: "inet" for Internet sockets, "unix" for UNIX-domain
# sockets, "fifo" for named pipes.
#
# Private: whether or not access is restricted to the mail system.
# Default is private service. Internet (inet) sockets can't be private.
#
# Unprivileged: whether the service runs with root privileges or as
# the owner of the Postfix system (the owner name is controlled by the
# mail_owner configuration variable in the main.cf file). Only the
# pipe, virtual and local delivery daemons require privileges.
#
# Chroot: whether or not the service runs chrooted to the mail queue
# directory (pathname is controlled by the queue_directory configuration
# variable in the main.cf file). Presently, all Postfix daemons can run
# chrooted, except for the pipe, virtual and local delivery daemons.
# The proxymap server can run chrooted, but doing so defeats most of
# the purpose of having that service in the first place.
# The files in the examples/chroot-setup subdirectory describe how
# to set up a Postfix chroot environment for your type of machine.
#
# Wakeup time: automatically wake up the named service after the
# specified number of seconds. A ? at the end of the wakeup time
# field requests that wake up events be sent only to services that
# are actually being used. Specify 0 for no wakeup. Presently, only
# the pickup, queue manager and flush daemons need a wakeup timer.
#
# Max procs: the maximum number of processes that may execute this
# service simultaneously. Default is to use a globally configurable
# limit (the default_process_limit configuration parameter in main.cf).
# Specify 0 for no process count limit.
#
# Command + args: the command to be executed. The command name is
# relative to the Postfix program directory (pathname is controlled by
# the daemon_directory configuration variable). Adding one or more
# -v options turns on verbose logging for that service; adding a -D
# option enables symbolic debugging (see the debugger_command variable
# in the main.cf configuration file). See individual command man pages
# for specific command-line options, if any.
#
# General main.cf options can be overridden for specific services.
# To override one or more main.cf options, specify them as arguments
# below, preceding each option by "-o". There must be no whitespace
# in the option itself (separate multiple values for an option by
# commas).
#
# In order to use the "uucp" message tranport below, set up entries
# in the transport table.
#
# In order to use the "cyrus" message transport below, configure it
# in main.cf as the mailbox_transport.
#
# SPECIFY ONLY PROGRAMS THAT ARE WRITTEN TO RUN AS POSTFIX DAEMONS.
# ALL DAEMONS SPECIFIED HERE MUST SPEAK A POSTFIX-INTERNAL PROTOCOL.
#
# DO NOT SHARE THE POSTFIX QUEUE BETWEEN MULTIPLE POSTFIX INSTANCES.
#
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - - - - smtpd
#submission inet n - - - - smtpd
# -o smtpd_etrn_restrictions=reject
#628 inet n - - - - qmqpd
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - - 300 1 qmgr
#qmgr fifo n - - 300 1 oqmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - - - - smtp
relay unix - - - - - smtp
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - - - - showq
error unix - - - - - error
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
#
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# maildrop. See the Postfix MAILDROP_README file for details.
#
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -d -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
# only used by postfix-tls
#tlsmgr fifo - - n 300 1 tlsmgr
#smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#587 inet n - n - - smtpd -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
# amavis
# smtp-amavis unix - - n - 2 smtp
# -o smtp_data_done_timeout=1200
# -o disable_dns_lookups=yes
# amavis
amavisfeed unix - - n - 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes
-o disable_dns_lookups=yes
-o max_use=20
127.0.0.1:10025 inet n - n - - smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8
-o strict_rfc821_envelopes=yes
-o smtpd_error_sleep_time=0
-o smtpd_soft_error_limit=1001
-o smtpd_hard_error_limit=1000
-o local_header_rewrite_clients=
-o smtpd_delay_reject=no
-o smtpd_data_restrictions=reject_unauth_pipelining
-o smtpd_end_of_data_restrictions=
-o smtpd_client_connection_count_limit=0
-o smtpd_client_connection_rate_limit=0
# -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
# done
Jan 20 15:12:00 blix postfix/smtpd[26080]: NOQUEUE: reject: RCPT from unknown[92.80.251.152]: 554 Service unavailable; Client host [92.80.251.152] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=92.80.251.152; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[92.80.251.152]>
Jan 20 15:12:00 blix postfix/smtpd[26080]: NOQUEUE: reject: RCPT from unknown[92.80.251.152]: 554 Service unavailable; Client host [92.80.251.152] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=92.80.251.152; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[92.80.251.152]>
Jan 20 15:12:00 blix postfix/smtpd[26080]: lost connection after DATA from unknown[92.80.251.152]
Jan 20 15:12:00 blix postfix/smtpd[26080]: disconnect from unknown[92.80.251.152]
Jan 20 15:12:00 blix postfix/smtpd[26065]: NOQUEUE: reject: RCPT from unknown[81.180.176.129]: 554 Service unavailable; Client host [81.180.176.129] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=81.180.176.129; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<DANIELA.localnet.localdomain>
Jan 20 15:12:01 blix postfix/smtpd[26063]: NOQUEUE: reject: RCPT from unknown[217.199.233.35]: 504 <org-c65f47f8e1c>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<org-c65f47f8e1c>
Jan 20 15:12:01 blix postfix/smtpd[26065]: lost connection after DATA from unknown[81.180.176.129]
Jan 20 15:12:01 blix postfix/smtpd[26065]: disconnect from unknown[81.180.176.129]
Jan 20 15:12:01 blix postfix/smtpd[26063]: lost connection after DATA from unknown[217.199.233.35]
Jan 20 15:12:01 blix postfix/smtpd[26063]: disconnect from unknown[217.199.233.35]
Jan 20 15:12:06 blix postfix/smtpd[26074]: warning: smtpd_peer_init: 217.199.233.35: hostname 0035.233.dataxp.net verification failed: Name or service not known
Jan 20 15:12:06 blix postfix/smtpd[26074]: connect from unknown[217.199.233.35]
Jan 20 15:12:06 blix postfix/smtpd[26062]: connect from 201-92-236-222.dsl.telesp.net.br[201.92.236.222]
Jan 20 15:12:07 blix postfix/smtpd[26051]: NOQUEUE: reject: RCPT from unknown[194.44.75.195]: 504 <darka>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<darka>
Jan 20 15:12:07 blix postfix/smtpd[26051]: NOQUEUE: reject: RCPT from unknown[194.44.75.195]: 504 <darka>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<darka>
Jan 20 15:12:07 blix postfix/smtpd[26051]: lost connection after DATA from unknown[194.44.75.195]
Jan 20 15:12:07 blix postfix/smtpd[26051]: disconnect from unknown[194.44.75.195]
Jan 20 15:12:08 blix postfix/smtpd[26075]: connect from unknown[90.151.24.226]
Jan 20 15:12:08 blix postfix/smtpd[26061]: warning: smtpd_peer_init: 81.180.176.129: hostname 81.180.176.129.hailanoi.ro verification failed: Name or service not known
Jan 20 15:12:08 blix postfix/smtpd[26061]: connect from unknown[81.180.176.129]
Jan 20 15:12:08 blix postfix/smtpd[26074]: NOQUEUE: reject: RCPT from unknown[217.199.233.35]: 504 <org-c65f47f8e1c>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<org-c65f47f8e1c>
Jan 20 15:12:08 blix postfix/smtpd[26062]: NOQUEUE: reject: RCPT from 201-92-236-222.dsl.telesp.net.br[201.92.236.222]: 554 Service unavailable; Client host [201.92.236.222] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=201.92.236.222; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<201-92-236-222.dsl.telesp.net.br>
Jan 20 15:12:08 blix postfix/smtpd[26062]: NOQUEUE: reject: RCPT from 201-92-236-222.dsl.telesp.net.br[201.92.236.222]: 554 Service unavailable; Client host [201.92.236.222] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=201.92.236.222; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<201-92-236-222.dsl.telesp.net.br>
Jan 20 15:12:08 blix postfix/smtpd[26062]: NOQUEUE: reject: RCPT from 201-92-236-222.dsl.telesp.net.br[201.92.236.222]: 554 Service unavailable; Client host [201.92.236.222] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=201.92.236.222; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<201-92-236-222.dsl.telesp.net.br>
Jan 20 15:12:08 blix postfix/smtpd[26062]: NOQUEUE: reject: RCPT from 201-92-236-222.dsl.telesp.net.br[201.92.236.222]: 554 Service unavailable; Client host [201.92.236.222] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=201.92.236.222; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<201-92-236-222.dsl.telesp.net.br>
Jan 20 15:12:08 blix postfix/smtpd[26062]: NOQUEUE: reject: RCPT from 201-92-236-222.dsl.telesp.net.br[201.92.236.222]: 554 Service unavailable; Client host [201.92.236.222] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=201.92.236.222; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<201-92-236-222.dsl.telesp.net.br>
Jan 20 15:12:08 blix postfix/smtpd[26074]: lost connection after DATA from unknown[217.199.233.35]
Jan 20 15:12:08 blix postfix/smtpd[26074]: disconnect from unknown[217.199.233.35]
Jan 20 15:12:09 blix postfix/smtpd[26062]: lost connection after DATA from 201-92-236-222.dsl.telesp.net.br[201.92.236.222]
Jan 20 15:12:09 blix postfix/smtpd[26062]: disconnect from 201-92-236-222.dsl.telesp.net.br[201.92.236.222]
Jan 20 15:12:09 blix postfix/smtpd[26075]: NOQUEUE: reject: RCPT from unknown[90.151.24.226]: 504 <philka>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<philka>
Jan 20 15:12:10 blix postfix/smtpd[26075]: lost connection after DATA from unknown[90.151.24.226]
Jan 20 15:12:10 blix postfix/smtpd[26075]: disconnect from unknown[90.151.24.226]
Jan 20 15:12:10 blix postfix/smtpd[26061]: NOQUEUE: reject: RCPT from unknown[81.180.176.129]: 554 Service unavailable; Client host [81.180.176.129] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=81.180.176.129; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<DANIELA.localnet.localdomain>
Jan 20 15:12:10 blix postfix/smtpd[26061]: NOQUEUE: reject: RCPT from unknown[81.180.176.129]: 554 Service unavailable; Client host [81.180.176.129] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=81.180.176.129; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<DANIELA.localnet.localdomain>
Jan 20 15:12:10 blix postfix/smtpd[26090]: warning: smtpd_peer_init: 190.190.16.74: hostname 74-16-190-190.cab.prima.net.ar verification failed: Name or service not known
Jan 20 15:12:10 blix postfix/smtpd[26090]: connect from unknown[190.190.16.74]
Jan 20 15:12:10 blix postfix/smtpd[26061]: NOQUEUE: reject: RCPT from unknown[81.180.176.129]: 554 Service unavailable; Client host [81.180.176.129] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=81.180.176.129; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<DANIELA.localnet.localdomain>
Jan 20 15:12:10 blix postfix/smtpd[26061]: NOQUEUE: reject: RCPT from unknown[81.180.176.129]: 554 Service unavailable; Client host [81.180.176.129] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=81.180.176.129; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<DANIELA.localnet.localdomain>
Jan 20 15:12:10 blix postfix/smtpd[26061]: lost connection after DATA from unknown[81.180.176.129]
Jan 20 15:12:10 blix postfix/smtpd[26061]: disconnect from unknown[81.180.176.129]
Jan 20 15:12:11 blix postfix/smtpd[26080]: connect from unknown[92.80.251.152]
Jan 20 15:12:12 blix postfix/smtpd[26090]: NOQUEUE: reject: RCPT from unknown[190.190.16.74]: 504 <desktop>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<desktop>
Jan 20 15:12:12 blix postfix/smtpd[26090]: NOQUEUE: reject: RCPT from unknown[190.190.16.74]: 504 <desktop>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<desktop>
Jan 20 15:12:12 blix postfix/smtpd[26090]: NOQUEUE: reject: RCPT from unknown[190.190.16.74]: 504 <desktop>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<desktop>
Jan 20 15:12:12 blix postfix/smtpd[26090]: NOQUEUE: reject: RCPT from unknown[190.190.16.74]: 504 <desktop>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<desktop>
Jan 20 15:12:12 blix postfix/smtpd[26090]: NOQUEUE: reject: RCPT from unknown[190.190.16.74]: 504 <desktop>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<desktop>
Jan 20 15:12:12 blix postfix/smtpd[26090]: lost connection after DATA from unknown[190.190.16.74]
Jan 20 15:12:12 blix postfix/smtpd[26090]: disconnect from unknown[190.190.16.74]
Jan 20 15:12:13 blix postfix/smtpd[26080]: NOQUEUE: reject: RCPT from unknown[92.80.251.152]: 554 Service unavailable; Client host [92.80.251.152] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=92.80.251.152; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[92.80.251.152]>
Jan 20 15:12:13 blix postfix/smtpd[26080]: NOQUEUE: reject: RCPT from unknown[92.80.251.152]: 554 Service unavailable; Client host [92.80.251.152] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=92.80.251.152; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[92.80.251.152]>
Jan 20 15:12:13 blix postfix/smtpd[26080]: lost connection after DATA from unknown[92.80.251.152]
Jan 20 15:12:13 blix postfix/smtpd[26080]: disconnect from unknown[92.80.251.152]
Jan 20 15:12:16 blix postfix/smtpd[26065]: connect from pppoe-88-147-181-76.san.ru[88.147.181.76]
Jan 20 15:12:17 blix postfix/smtpd[26063]: warning: smtpd_peer_init: 81.180.176.129: hostname 81.180.176.129.hailanoi.ro verification failed: Name or service not known
Jan 20 15:12:17 blix postfix/smtpd[26063]: connect from unknown[81.180.176.129]
Jan 20 15:12:17 blix postfix/smtpd[26065]: NOQUEUE: reject: RCPT from pppoe-88-147-181-76.san.ru[88.147.181.76]: 504 <11-a3ec2eacc2f6>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<11-a3ec2eacc2f6>
Jan 20 15:12:17 blix postfix/smtpd[26065]: NOQUEUE: reject: RCPT from pppoe-88-147-181-76.san.ru[88.147.181.76]: 504 <11-a3ec2eacc2f6>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<11-a3ec2eacc2f6>
Jan 20 15:12:18 blix postfix/smtpd[26065]: lost connection after DATA from pppoe-88-147-181-76.san.ru[88.147.181.76]
Jan 20 15:12:18 blix postfix/smtpd[26065]: disconnect from pppoe-88-147-181-76.san.ru[88.147.181.76]
Jan 20 15:12:18 blix postfix/smtpd[26051]: connect from 93-80-201-82.broadband.corbina.ru[93.80.201.82]
Jan 20 15:12:19 blix postfix/smtpd[26063]: NOQUEUE: reject: RCPT from unknown[81.180.176.129]: 554 Service unavailable; Client host [81.180.176.129] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=81.180.176.129; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<DANIELA.localnet.localdomain>
Jan 20 15:12:19 blix postfix/smtpd[26063]: NOQUEUE: reject: RCPT from unknown[81.180.176.129]: 554 Service unavailable; Client host [81.180.176.129] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=81.180.176.129; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<DANIELA.localnet.localdomain>
Jan 20 15:12:19 blix postfix/smtpd[26063]: lost connection after DATA from unknown[81.180.176.129]
Jan 20 15:12:19 blix postfix/smtpd[26063]: disconnect from unknown[81.180.176.129]
Jan 20 15:12:19 blix postfix/smtpd[26074]: connect from unknown[60.22.156.41]
Jan 20 15:12:19 blix postfix/smtpd[26062]: connect from 52-45-223-201.adsl.terra.cl[201.223.45.52]
Jan 20 15:12:20 blix postfix/smtpd[26051]: NOQUEUE: reject: RCPT from 93-80-201-82.broadband.corbina.ru[93.80.201.82]: 554 Service unavailable; Client host [93.80.201.82] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=93.80.201.82; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<93-80-201-82.broadband.corbina.ru>
Jan 20 15:12:20 blix postfix/smtpd[26051]: NOQUEUE: reject: RCPT from 93-80-201-82.broadband.corbina.ru[93.80.201.82]: 554 Service unavailable; Client host [93.80.201.82] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=93.80.201.82; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<93-80-201-82.broadband.corbina.ru>
Jan 20 15:12:21 blix postfix/smtpd[26051]: lost connection after DATA from 93-80-201-82.broadband.corbina.ru[93.80.201.82]
Jan 20 15:12:21 blix postfix/smtpd[26051]: disconnect from 93-80-201-82.broadband.corbina.ru[93.80.201.82]
Jan 20 15:12:21 blix postfix/smtpd[26074]: NOQUEUE: reject: RCPT from unknown[60.22.156.41]: 554 <195.10.223.184>: Helo command rejected: You are not ip me; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<195.10.223.184>
Jan 20 15:12:21 blix postfix/smtpd[26062]: NOQUEUE: reject: RCPT from 52-45-223-201.adsl.terra.cl[201.223.45.52]: 504 <colossus>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<colossus>
Jan 20 15:12:21 blix postfix/smtpd[26062]: NOQUEUE: reject: RCPT from 52-45-223-201.adsl.terra.cl[201.223.45.52]: 504 <colossus>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<colossus>
Jan 20 15:12:22 blix postfix/smtpd[26075]: connect from camomile.cloud9.net[168.100.1.3]
Jan 20 15:12:22 blix postfix/smtpd[26062]: lost connection after DATA from 52-45-223-201.adsl.terra.cl[201.223.45.52]
Jan 20 15:12:22 blix postfix/smtpd[26062]: disconnect from 52-45-223-201.adsl.terra.cl[201.223.45.52]
Jan 20 15:12:22 blix postfix/smtpd[26075]: 7B1AC14158FD: client=camomile.cloud9.net[168.100.1.3]
Jan 20 15:12:22 blix postfix/cleanup[26143]: 7B1AC14158FD: message-id=<[email protected]>
Jan 20 15:12:22 blix postfix/qmgr[24724]: 7B1AC14158FD: from=<[email protected]>, size=3326, nrcpt=1 (queue active)
Jan 20 15:12:22 blix postfix/smtpd[26074]: disconnect from unknown[60.22.156.41]
Jan 20 15:12:22 blix postfix/smtpd[26075]: disconnect from camomile.cloud9.net[168.100.1.3]
Jan 20 15:12:23 blix postfix/smtpd[26061]: warning: smtpd_peer_init: 190.190.16.74: hostname 74-16-190-190.cab.prima.net.ar verification failed: Name or service not known
Jan 20 15:12:23 blix postfix/smtpd[26061]: connect from unknown[190.190.16.74]
Jan 20 15:12:24 blix postfix/smtpd[26090]: connect from unknown[92.80.251.152]
Jan 20 15:12:24 blix postfix/smtpd[26065]: warning: smtpd_peer_init: 217.199.233.35: hostname 0035.233.dataxp.net verification failed: Name or service not known
Jan 20 15:12:24 blix postfix/smtpd[26065]: connect from unknown[217.199.233.35]
Jan 20 15:12:25 blix postfix/smtpd[26061]: NOQUEUE: reject: RCPT from unknown[190.190.16.74]: 504 <desktop>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<desktop>
Jan 20 15:12:25 blix postfix/smtpd[26061]: NOQUEUE: reject: RCPT from unknown[190.190.16.74]: 504 <desktop>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<desktop>
Jan 20 15:12:25 blix postfix/smtpd[26061]: NOQUEUE: reject: RCPT from unknown[190.190.16.74]: 504 <desktop>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<desktop>
Jan 20 15:12:25 blix postfix/smtpd[26061]: lost connection after DATA from unknown[190.190.16.74]
Jan 20 15:12:25 blix postfix/smtpd[26061]: disconnect from unknown[190.190.16.74]
Jan 20 15:12:26 blix postfix/smtpd[26063]: warning: smtpd_peer_init: 81.180.176.129: hostname 81.180.176.129.hailanoi.ro verification failed: Name or service not known
Jan 20 15:12:26 blix postfix/smtpd[26063]: connect from unknown[81.180.176.129]
Jan 20 15:12:26 blix postfix/smtpd[26090]: NOQUEUE: reject: RCPT from unknown[92.80.251.152]: 554 Service unavailable; Sender address [[email protected]] blocked using dsn.rfc-ignorant.org; Not supporting null originator (DSN); from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[92.80.251.152]>
Jan 20 15:12:26 blix postfix/smtpd[26090]: NOQUEUE: reject: RCPT from unknown[92.80.251.152]: 554 Service unavailable; Sender address [[email protected]] blocked using dsn.rfc-ignorant.org; Not supporting null originator (DSN); from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[92.80.251.152]>
Jan 20 15:12:26 blix postfix/smtpd[26065]: NOQUEUE: reject: RCPT from unknown[217.199.233.35]: 504 <org-c65f47f8e1c>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<org-c65f47f8e1c>
Jan 20 15:12:27 blix postfix/smtpd[26065]: lost connection after DATA from unknown[217.199.233.35]
Jan 20 15:12:27 blix postfix/smtpd[26065]: disconnect from unknown[217.199.233.35]
Jan 20 15:12:28 blix postfix/smtpd[26063]: NOQUEUE: reject: RCPT from unknown[81.180.176.129]: 554 Service unavailable; Client host [81.180.176.129] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=81.180.176.129; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<DANIELA.localnet.localdomain>
Jan 20 15:12:28 blix postfix/smtpd[26063]: NOQUEUE: reject: RCPT from unknown[81.180.176.129]: 554 Service unavailable; Client host [81.180.176.129] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=81.180.176.129; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<DANIELA.localnet.localdomain>
Jan 20 15:12:28 blix postfix/smtpd[26063]: NOQUEUE: reject: RCPT from unknown[81.180.176.129]: 554 Service unavailable; Client host [81.180.176.129] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=81.180.176.129; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<DANIELA.localnet.localdomain>
Jan 20 15:12:28 blix postfix/smtpd[26063]: NOQUEUE: reject: RCPT from unknown[81.180.176.129]: 554 Service unavailable; Client host [81.180.176.129] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=81.180.176.129; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<DANIELA.localnet.localdomain>
Jan 20 15:12:28 blix postfix/smtpd[26090]: NOQUEUE: reject: RCPT from unknown[92.80.251.152]: 554 Service unavailable; Client host [92.80.251.152] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=92.80.251.152; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[92.80.251.152]>
Jan 20 15:12:28 blix postfix/smtpd[26090]: NOQUEUE: reject: RCPT from unknown[92.80.251.152]: 554 Service unavailable; Client host [92.80.251.152] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=92.80.251.152; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[92.80.251.152]>
Jan 20 15:12:28 blix postfix/smtpd[26063]: lost connection after DATA from unknown[81.180.176.129]
Jan 20 15:12:28 blix postfix/smtpd[26063]: disconnect from unknown[81.180.176.129]
Jan 20 15:12:28 blix postfix/smtpd[26090]: lost connection after DATA from unknown[92.80.251.152]
Jan 20 15:12:28 blix postfix/smtpd[26090]: disconnect from unknown[92.80.251.152]
Jan 20 15:12:29 blix postfix/smtpd[26051]: connect from 201-92-236-222.dsl.telesp.net.br[201.92.236.222]
Jan 20 15:12:30 blix postfix/smtpd[26062]: connect from unknown[78.181.25.162]
