On Mon, Jan 11, 2010 at 03:27:05PM -0300, Damian Rivas wrote:
> I have a Postfix box basically configured to send mail from my
> organization to the Internet. Today I received a warning message
> telling me that the mail queue was full.
Who/what sent you that warning?
> It seems that some Spammer is using my server as an Open Relay, so
> I used the "check_sender_access" function to only allow my domains
> to send mail to the outside, but it is not working and I don't know
> what to do, perhaps you can give me some tips.
No evidence below suggests that you might be an open relay. LOGS!
> Postconf -n output:
> mynetworks = 127.0.0.0/8, xxx.xx.xx.xx/29, xxx.xxx.xx.xx/29
These are the hosts allowed to relay. Don't mung the IP addresses.
They can probably be looked up anyway, using the domain names that
weren't hidden (good).
> relay_domains = cht.com.ar, skalbue.com.ar, ci-educ.com.ar,
> hispanoamericana.com.ar, aaovyt.com.ar, consulthouse.travel,
> consul.travel
If this is outgoing only, why are there relay_domains ?
> smtpd_sender_restrictions = permit_mynetworks, check_sender_access
> = hash :/etc/postfix/sender_map, reject_non_fqdn_sender,
> reject_unknown_sender_domain, permit
The second "=" is not correct syntax. Except for the two reject_*
restrictions, this stage does nothing. And as documented, it CANNOT
permit relaying; this is controlled only in
smtpd_recipient_restrictions .
> sender_map:
>
> cht.com.ar OK
> aaovyt.com.ar OK
> hispanoamericana.com.ar OK
> cht.tur.ar OK
> consulthouse.travel OK
>
> If you need anything else, please let me know.
A cup of tea, please. :)
YOU need to stop the spam, and if you need help in determining how
your system was allowing it, please see:
http://www.postfix.org/DEBUG_README.html#mail
--
Offlist mail to this address is discarded unless
"/dev/rob0" or "not-spam" is in Subject: header
