Le 22/12/2010 18:52, Razvan Chitu a écrit :
Hello again,
This time the question is simple: my server is being maliciously used to
send spam, and this has to stop. Here are the log entries in question
(latest ones):
Dec 22 19:03:17 raptor postfix/smtpd[25021]: lost connection after RCPT
from dan75-7-88-166-185-164.fbx.proxad.net[88.166.185.164]
Dec 22 19:03:17 raptor postfix/smtpd[25021]: disconnect from
dan75-7-88-166-185-164.fbx.proxad.net[88.166.185.164]
Dec 22 19:03:17 raptor postfix/smtpd[25077]: lost connection after RCPT
from dan75-7-88-166-185-164.fbx.proxad.net[88.166.185.164]
Dec 22 19:03:17 raptor postfix/smtpd[25077]: disconnect from
dan75-7-88-166-185-164.fbx.proxad.net[88.166.185.164]
Dec 22 19:03:17 raptor postfix/smtpd[25076]: lost connection after RCPT
from dan75-7-88-166-185-164.fbx.proxad.net[88.166.185.164]
Dec 22 19:03:17 raptor postfix/smtpd[25076]: disconnect from
dan75-7-88-166-185-164.fbx.proxad.net[88.166.185.164]
Dec 22 19:03:17 raptor postfix/smtpd[25075]: lost connection after RCPT
from dan75-7-88-166-185-164.fbx.proxad.net[88.166.185.164]
Dec 22 19:03:17 raptor postfix/smtpd[25075]: disconnect from
dan75-7-88-166-185-164.fbx.proxad.net[88.166.185.164]
Dec 22 19:03:17 raptor postfix/smtpd[25072]: lost connection after RCPT
from dan75-7-88-166-185-164.fbx.proxad.net[88.166.185.164]
Dec 22 19:03:17 raptor postfix/smtpd[25072]: disconnect from
dan75-7-88-166-185-164.fbx.proxad.net[88.166.185.164]
*Dec 22 19:03:17 raptor postfix/smtpd[25021]: connect from
ccibc.eu[89.121.199.170]
Dec 22 19:03:17 raptor postfix/smtpd[25021]: 99EB51BC37B:
client=ccibc.eu[89.121.199.170]
Dec 22 19:03:17 raptor postfix/cleanup[25040]: 99EB51BC37B:
message-id=<[email protected]>
Dec 22 19:03:18 raptor postfix/qmgr[23830]: 99EB51BC37B:
from=<[email protected]>, size=1307600, nrcpt=1 (queue active)
Dec 22 19:03:18 raptor postfix/smtpd[25021]: disconnect from
ccibc.eu[89.121.199.170]*
*Dec 22 19:03:18 raptor postfix/smtp[25079]: 99EB51BC37B:
to=<[email protected]>, relay=none, delay=0.62, delays=0.61/0/0/0,
dsn=5.4.6, status=bounced (m
ail for djx.topedge.com loops back to myself)
FIX THIS!
it would help a lot of you follow the directions in
http://www.postfix.org/DEBUG_README.html#mail
(you were told to do so when you subscribed to the list, but you may
have missed that...).
in particular, show the output of 'postconf -n'. and while you are at
it, do you want mail for *[email protected]?
in absence of that, the two guesses of the day are:
1) if you have a NAT box, make sure to use
proxy_interfaces = external.ip.of.box
2) you possibly want
# postconf -e relay_domains=
please do not run the command above unless you understand what it does
and make sure it is good for you...
[snip]
