apache2 forwarding emails

2005-08-14 Thread manou
Hello folks,
Since today, my apache2 2.0.54-4 sarge forwards mails-spams to hotmail
and msn users,
I stopped down apache2 temporarily now.

here' s a log from postfix report:

Transcript of session follows.

 Out: 220 dog.domain.tld [...and the banner...]
 In:  POST / HTTP/1.1
 Out: 502 Error: command not implemented
 In:  Host: x.x.x.x:25
 Out: 502 Error: command not implemented
 In:  Content-type: application/octet-stream
 Out: 502 Error: command not implemented
 In:  Content-length: 3277
 Out: 502 Error: command not implemented
 In:  Max-Forwards: 10
 Out: 502 Error: command not implemented
 In:  Via: 1.1 x.x.x.x:25
 Out: 502 Error: command not implemented
 In:
 Out: 500 Error: bad syntax
 In:  HELO
 Out: 501 Syntax: HELO hostname
 In:  MAIL From:[EMAIL PROTECTED]
 Out: 250 Ok

...


Is this relted to the CAN-2005-2088 apache2 bug or  another bug or I
have mistake on my configuration?

Notes:
- the server runs with squid.
- x.x.x.x is the postfix server's IP


REgards,

Manou


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: apache2 forwarding emails

2005-08-14 Thread Bernd Eckenfels
In article [EMAIL PROTECTED] you wrote:
 I stopped down apache2 temporarily now.

Does it help to stop apache? I see some possible sources for this post
requests:

a) directly by an brwser (unlikely, check client ip)
b) by a client behind squid (likely, check squid log)
c) by apache redirect/proxy (see below)
d) by an forwarding cgi on apache (unlikely, check access log)

If you claim it helps to shut down apache, that please check if you  have
the proxy module enabled in apache and forget to secure it by acl.

Greetings
Bernd


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: apache2 forwarding emails

2005-08-14 Thread Jabo
Hello,

this looks more like a postfix problem to me.

Take a look at the main.cf in your postfix directory. You should find a
parameter called my_networks there. I suggest to manually set any area
you accept mail from.

Also, you might set
smtpd_recipient_restrictions=$my_networks,reject_unauth_destination.

Then restart postfix and watch your postfix log.

I don't think this has anything to do mit apache, but there have been http
requests to the mailer port. It says: In:  Host: x.x.x.x:25.

Do you find any entries of the same origin as in the postfix log? Maybe
not... the HELO was the first call that caused a promising reply. And it
was sent to the smtpd, not to apache. This is my guess...


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]