Hi, Using postfix v 2.5.14 on Mac Snow Leopard Server, I've been alarmed at the amount of spam messages going to users that no longer exist. The server is at a crawl pace and I'm not sure if my attempts to control the situation is making it worse. Could someone look at the main.cf and logs and direct me please?
Thank You Deb Chabot Here is the main.cf (un edited)
always_bcc = biff = no command_directory = /usr/sbin config_directory = /etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 daemon_directory = /usr/libexec/postfix debug_peer_level = 2 disable_vrfy_command = yes enable_server_options = yes header_checks = pcre:/etc/postfix/custom_header_checks html_directory = /usr/share/doc/postfix/html inet_interfaces = all local_recipient_maps = proxy:unix:passwd.byname $alias_maps mail_owner = _postfix mailbox_size_limit = 0 mailbox_transport = dovecot mailq_path = /usr/bin/mailq manpage_directory = /usr/share/man maps_rbl_domains = message_size_limit = 41943040 mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, mail.chabotandburnett.com mydomain = chabotandburnett.com mydomain_fallback = localhost myhostname = mail.chabotandburnett.com mynetworks = 127.0.0.0/8,192.168.1.0/24 newaliases_path = /usr/bin/newaliases queue_directory = /private/var/spool/postfix readme_directory = /usr/share/doc/postfix recipient_delimiter = + relayhost = smtp.comcast.net sample_directory = /usr/share/doc/postfix/examples sendmail_path = /usr/sbin/sendmail setgid_group = _postdrop smtp_sasl_password_maps = smtpd_client_restrictions = permit_mynetworks permit_sasl_authenticated reject_rbl_client zen.spamhaus.org permit smtpd_enforce_tls = no smtpd_helo_required = yes smtpd_helo_restrictions = reject_invalid_helo_hostname reject_non_fqdn_helo_hostname smtpd_pw_server_security_options = cram-md5,login,gssapi,plain smtpd_recipient_restrictions = reject_invalid_hostname reject_non_fqdn_hostname reject_non_fqdn_recipient permit_mynetworks permit_sasl_authenticated reject_unauth_destination reject_rbl_client zen.spamhaus.org permit smtpd_sasl_auth_enable = yes smtpd_tls_CAfile = /etc/certificates/chabotandburnett.com.E2A59DE0BEEA01B2EEF6669A3BF514F141EA4457.chain.pem smtpd_tls_cert_file = /etc/certificates/chabotandburnett.com.E2A59DE0BEEA01B2EEF6669A3BF514F141EA4457.cert.pem smtpd_tls_exclude_ciphers = SSLv2, aNULL, ADH, eNULL smtpd_tls_key_file = /etc/certificates/chabotandburnett.com.E2A59DE0BEEA01B2EEF6669A3BF514F141EA4457.key.pem smtpd_tls_loglevel = 0 smtpd_use_pw_server = yes smtpd_use_tls = yes tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_alias_maps =
Here is the mail smtp log:
c 3 08:58:09 chabotandburnett postfix/cleanup[12173]: C8CECAD93E1: message-id=<dc232828a65f44169050e19c88804...@internal.phillipsinsurance.com> Dec 3 08:58:09 chabotandburnett postfix/qmgr[11837]: C8CECAD93E1: from=<j...@phillipsinsurance.com>, size=2729, nrcpt=1 (queue active) Dec 3 08:58:09 chabotandburnett postfix/smtpd[12167]: disconnect from mx1.tortus.com[216.41.105.14] Dec 3 08:58:13 chabotandburnett postfix/smtpd[12176]: connect from localhost[127.0.0.1] Dec 3 08:58:13 chabotandburnett postfix/smtpd[12176]: E4E28AD93F3: client=localhost[127.0.0.1] Dec 3 08:58:13 chabotandburnett postfix/cleanup[12173]: E4E28AD93F3: message-id=<dc232828a65f44169050e19c88804...@internal.phillipsinsurance.com> Dec 3 08:58:13 chabotandburnett postfix/smtpd[12176]: disconnect from localhost[127.0.0.1] Dec 3 08:58:13 chabotandburnett postfix/qmgr[11837]: E4E28AD93F3: from=<j...@phillipsinsurance.com>, size=3218, nrcpt=1 (queue active) Dec 3 08:58:14 chabotandburnett postfix/smtp[12174]: C8CECAD93E1: to=<kcap...@chabotandburnett.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=4.2, delays=0.13/0.01/0/4.1, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=00604-19, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as E4E28AD93F3) Dec 3 08:58:14 chabotandburnett postfix/qmgr[11837]: C8CECAD93E1: removed Dec 3 08:58:14 chabotandburnett postfix/pipe[12179]: E4E28AD93F3: to=<kcap...@chabotandburnett.com>, relay=dovecot, delay=0.12, delays=0/0.1/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service) Dec 3 08:58:14 chabotandburnett postfix/qmgr[11837]: E4E28AD93F3: removed Dec 3 08:58:16 chabotandburnett postfix/smtpd[12181]: connect from 135.sub-174-252-32.myvzw.com[174.252.32.135] Dec 3 08:58:17 chabotandburnett postfix/smtpd[12181]: NOQUEUE: reject: RCPT from 135.sub-174-252-32.myvzw.com[174.252.32.135]: 550 5.1.1 <kris...@chabotandburnett.com>: Recipient address rejected: User unknown in local recipient table; from=<j...@chabotandburnett.com> to=<kris...@chabotandburnett.com> proto=ESMTP helo=<[10.225.95.123]> Dec 3 08:58:17 chabotandburnett postfix/smtpd[12181]: 9BD59AD93F6: client=135.sub-174-252-32.myvzw.com[174.252.32.135], sasl_method=CRAM-MD5, sasl_username=Jim Dec 3 08:58:17 chabotandburnett postfix/smtpd[12181]: lost connection after DATA (6 bytes) from 135.sub-174-252-32.myvzw.com[174.252.32.135] Dec 3 08:58:17 chabotandburnett postfix/smtpd[12181]: disconnect from 135.sub-174-252-32.myvzw.com[174.252.32.135] Dec 3 08:58:17 chabotandburnett postfix/cleanup[12173]: 9BD59AD93F6: message-id=<20121203135817.9bd59ad9...@mail.chabotandburnett.com> Dec 3 08:58:30 chabotandburnett postfix/smtpd[12167]: connect from mta.em.bose.com[68.232.199.197] Dec 3 08:58:31 chabotandburnett postfix/smtpd[12167]: 59441AD9408: client=mta.em.bose.com[68.232.199.197] Dec 3 08:58:31 chabotandburnett postfix/cleanup[12173]: 59441AD9408: message-id=<41af7c7d-b0b6-479b-a360-12d9213ea...@xtnvmta1165.xt.local> Dec 3 08:58:32 chabotandburnett postfix/qmgr[11837]: 59441AD9408: from=<bounce-57209_html-359732050-3453134-1056644-2...@bounce.em.bose.com>, size=48437, nrcpt=1 (queue active) Dec 3 08:58:32 chabotandburnett postfix/smtpd[12167]: disconnect from mta.em.bose.com[68.232.199.197] Dec 3 08:58:35 chabotandburnett postfix/smtpd[12176]: connect from localhost[127.0.0.1] Dec 3 08:58:35 chabotandburnett postfix/smtpd[12176]: 7B60BAD9419: client=localhost[127.0.0.1] Dec 3 08:58:35 chabotandburnett postfix/cleanup[12173]: 7B60BAD9419: message-id=<41af7c7d-b0b6-479b-a360-12d9213ea...@xtnvmta1165.xt.local> Dec 3 08:58:35 chabotandburnett postfix/smtpd[12176]: disconnect from localhost[127.0.0.1] Dec 3 08:58:35 chabotandburnett postfix/qmgr[11837]: 7B60BAD9419: from=<bounce-57209_html-359732050-3453134-1056644-2...@bounce.em.bose.com>, size=48918, nrcpt=1 (queue active) Dec 3 08:58:35 chabotandburnett postfix/smtp[12174]: 59441AD9408: to=<j...@chabotandburnett.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=4.3, delays=0.8/0/0/3.5, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=00605-19, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 7B60BAD9419) Dec 3 08:58:35 chabotandburnett postfix/pipe[12179]: 7B60BAD9419: to=<j...@chabotandburnett.com>, relay=dovecot, delay=0.02, delays=0.01/0/0/0.01, dsn=2.0.0, status=sent (delivered via dovecot service) Dec 3 08:58:35 chabotandburnett postfix/qmgr[11837]: 59441AD9408: removed Dec 3 08:58:35 chabotandburnett postfix/qmgr[11837]: 7B60BAD9419: removed Dec 3 08:58:45 chabotandburnett postfix/smtpd[12181]: connect from 135.sub-174-252-32.myvzw.com[174.252.32.135] Dec 3 08:58:46 chabotandburnett postfix/smtpd[12181]: CE7D9AD9429: client=135.sub-174-252-32.myvzw.com[174.252.32.135], sasl_method=CRAM-MD5, sasl_username=Jim Dec 3 08:58:47 chabotandburnett postfix/cleanup[12173]: CE7D9AD9429: message-id=<0435faa7-ba14-45fa-b190-028b5613f...@chabotandburnett.com> Dec 3 08:58:47 chabotandburnett postfix/qmgr[11837]: CE7D9AD9429: from=<j...@chabotandburnett.com>, size=2896, nrcpt=1 (queue active) Dec 3 08:58:47 chabotandburnett postfix/smtpd[12176]: connect from localhost[127.0.0.1] Dec 3 08:58:47 chabotandburnett postfix/smtpd[12176]: 387CDAD9430: client=localhost[127.0.0.1] Dec 3 08:58:47 chabotandburnett postfix/cleanup[12173]: 387CDAD9430: message-id=<0435faa7-ba14-45fa-b190-028b5613f...@chabotandburnett.com> Dec 3 08:58:47 chabotandburnett postfix/smtpd[12176]: disconnect from localhost[127.0.0.1] Dec 3 08:58:47 chabotandburnett postfix/qmgr[11837]: 387CDAD9430: from=<j...@chabotandburnett.com>, size=3383, nrcpt=1 (queue active) Dec 3 08:58:47 chabotandburnett postfix/smtp[12174]: CE7D9AD9429: to=<stu.charleswo...@safway.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.41, delays=0.23/0/0/0.18, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=00604-20, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 387CDAD9430) Dec 3 08:58:47 chabotandburnett postfix/qmgr[11837]: CE7D9AD9429: removed Dec 3 08:58:47 chabotandburnett postfix/smtp[12220]: 387CDAD9430: to=<stu.charleswo...@safway.com>, relay=smtp.comcast.net[68.87.26.155]:25, delay=0.5, delays=0/0.01/0.3/0.19, dsn=2.0.0, status=sent (250 2.0.0 X1qs1k00V1bvDlH3d1qtx0 mail accepted for delivery) Dec 3 08:58:47 chabotandburnett postfix/qmgr[11837]: 387CDAD9430: removed Dec 3 08:58:50 chabotandburnett postfix/smtpd[12181]: NOQUEUE: reject: RCPT from 135.sub-174-252-32.myvzw.com[174.252.32.135]: 550 5.1.1 <kris...@chabotandburnett.com>: Recipient address rejected: User unknown in local recipient table; from=<j...@chabotandburnett.com> to=<kris...@chabotandburnett.com> proto=ESMTP helo=<[10.225.95.123]> Dec 3 08:58:50 chabotandburnett postfix/smtpd[12181]: 77BF9AD9439: client=135.sub-174-252-32.myvzw.com[174.252.32.135], sasl_method=CRAM-MD5, sasl_username=Jim Dec 3 08:58:50 chabotandburnett postfix/smtpd[12181]: lost connection after DATA (6 bytes) from 135.sub-174-252-32.myvzw.com[174.252.32.135] Dec 3 08:58:50 chabotandburnett postfix/smtpd[12181]: disconnect from 135.sub-174-252-32.myvzw.com[174.252.32.135] Dec 3 08:58:50 chabotandburnett postfix/cleanup[12173]: 77BF9AD9439: message-id=<20121203135850.77bf9ad9...@mail.chabotandburnett.com>
