Selcuk Yazar: > i think from=<> is empty or unknown, also this messages comes from log 4-5 > times per second. we think some kind attack or mallware thing.
Bt's typical for backscatter spam from MTAs that accept-then-reject. See http://www.postfix.org/BACKSCATTER_README.html > but i'm not sure RCPT from > > xedge2.campus.tue.nl[131.155.6.117] > > ip is real or not ? The IP address is very likely to be real. > also the user in from part of log is a driver(no offence), i 'm > sure he looks mail once a day, and he is on vacation . :) That's typical for backscatter spam from MTAs that accept-then-reject. See http://www.postfix.org/BACKSCATTER_README.html Wietse
