Hi,

(btw. Thanks for the info on indexing ldap. Maild seem not to fail any
more after we indexed it. )

The last couple of days, the traffic of my server has increased with
20.000 messages per day. I think it's someone using my server for spam,
as there are several log entries that seem like this.

But... I have smtp-after-pop set up, and as far as I thought, this
should stop the spam.

Still, I'm getting things like this in the logs: (after the mail)

They seem to be spamming from a server called rediffmail.com. But how can
they send messages via my server. Cleverly, they're not sending messages
to my users, as they would have complained. But I could see in the logs
and statistics that there was something wrong.

On obvious answer would be that someone has used pop from their server,
right?

Are there any other answers? Are there any other things I can do to prevent
this?

Do you have a good URL with info on how to set up RBL? or any other way I
can prevent this?

Regards,
Lars
May 22 00:33:28 freedom1 qmail: 1022052808.873261 info msg 200566: bytes
4339 from <[EMAIL PROTECTED]> qp 1084 uid 50
May 22 00:33:28 freedom1 qmail: 1022052808.878045 starting delivery 76740:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.878146 status: local 0/10 remote
1/20
May 22 00:33:28 freedom1 qmail: 1022052808.878172 starting delivery 76741:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.878195 status: local 0/10 remote
2/20
May 22 00:33:28 freedom1 qmail: 1022052808.878261 starting delivery 76742:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.878287 status: local 0/10 remote
3/20
May 22 00:33:28 freedom1 qmail: 1022052808.880664 starting delivery 76743:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.880758 status: local 0/10 remote
4/20
May 22 00:33:28 freedom1 qmail: 1022052808.882565 starting delivery 76744:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.882666 status: local 0/10 remote
5/20
May 22 00:33:28 freedom1 qmail: 1022052808.885876 starting delivery 76745:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.885973 status: local 0/10 remote
6/20
May 22 00:33:28 freedom1 qmail: 1022052808.889878 starting delivery 76746:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.889964 status: local 0/10 remote
7/20
May 22 00:33:28 freedom1 qmail: 1022052808.891594 starting delivery 76747:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.891696 status: local 0/10 remote
8/20
May 22 00:33:28 freedom1 qmail: 1022052808.894215 starting delivery 76748:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.894310 status: local 0/10 remote
9/20
May 22 00:33:28 freedom1 qmail: 1022052808.898818 starting delivery 76749:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.898907 status: local 0/10 remote
10/20
May 22 00:33:28 freedom1 qmail: 1022052808.901333 starting delivery 76750:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.901428 status: local 0/10 remote
11/20
May 22 00:33:28 freedom1 qmail: 1022052808.902607 starting delivery 76751:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.902704 status: local 0/10 remote
12/20
May 22 00:33:28 freedom1 qmail: 1022052808.907625 starting delivery 76752:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.907715 status: local 0/10 remote
13/20
May 22 00:33:28 freedom1 qmail: 1022052808.909810 starting delivery 76753:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.909912 status: local 0/10 remote
14/20
May 22 00:33:28 freedom1 qmail: 1022052808.913341 starting delivery 76754:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.913438 status: local 0/10 remote
15/20
May 22 00:33:28 freedom1 qmail: 1022052808.916892 starting delivery 76755:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.916985 status: local 0/10 remote
16/20
May 22 00:33:28 freedom1 qmail: 1022052808.917960 starting delivery 76756:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.918049 status: local 0/10 remote
17/20
May 22 00:33:28 freedom1 qmail: 1022052808.922417 starting delivery 76757:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.922513 status: local 0/10 remote
18/20
May 22 00:33:28 freedom1 qmail: 1022052808.926041 starting delivery 76758:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.926127 status: local 0/10 remote
19/20
May 22 00:33:28 freedom1 qmail: 1022052808.927892 starting delivery 76759:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:28 freedom1 qmail: 1022052808.927991 status: local 0/10 remote
20/20
May 22 00:33:29 freedom1 qmail: 1022052809.086812 delivery 76759: deferral:
Connected_to_65.54.254.145_but_connection_died._(
May 22 00:33:29 freedom1 qmail: 1022052809.086917 status: local 0/10 remote
19/20
May 22 00:33:29 freedom1 qmail: 1022052809.086943 starting delivery 76760:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:29 freedom1 qmail: 1022052809.086966 status: local 0/10 remote
20/20
May 22 00:33:29 freedom1 qmail: 1022052809.095384 delivery 76745: failure:
207.46.181.13_does_not_like_recipient./Remote_host
May 22 00:33:29 freedom1 qmail: 1022052809.095493 status: local 0/10 remote
19/20
May 22 00:33:29 freedom1 qmail: 1022052809.095521 starting delivery 76761:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:29 freedom1 qmail: 1022052809.095543 status: local 0/10 remote
20/20
May 22 00:33:29 freedom1 qmail: 1022052809.109040 delivery 76747: failure:
207.46.181.13_does_not_like_recipient./Remote_host
May 22 00:33:29 freedom1 qmail: 1022052809.109145 status: local 0/10 remote
19/20
May 22 00:33:29 freedom1 qmail: 1022052809.109172 starting delivery 76762:
msg 200566 to remote [EMAIL PROTECTED]
May 22 00:33:29 freedom1 qmail: 1022052809.109196 status: local 0/10 remote
20/20May 22 00:33:29 freedom1 qmail: 1022052809.109196 status: local 0/10
remote 20/20

Reply via email to