The OpenNET Project / Index page

[ новости /+++ | форум | теги | ]

форумы  помощь  поиск  регистрация  майллист  вход/выход  слежка  RSS
"Posfix -  spam!!"
Вариант для распечатки  
Пред. тема | След. тема 
Форумы Информационная безопасность (Public)
Изначальное сообщение [ Отслеживать ]

"Posfix -  spam!!"  +/
Сообщение от 100matolog email(ok) on 11-Сен-09, 09:16 
Помогите разобратся.
В последние несколько дней в логах вот такое
Sep 11 08:47:56 router postfix/qmgr[4388]: DA439367CAF: from=<alimaasif1@cantv.net>, size=4116, nrcpt=10 (queue active)
Sep 11 08:47:56 router postfix/qmgr[4388]: D5AD93C67ED: from=<best4g@club-internet.fr>, size=2954, nrcpt=30 (queue active)
Sep 11 08:47:57 router postfix/qmgr[4388]: D6F35356DE6: from=<best4g@club-internet.fr>, size=2753, nrcpt=50 (queue active)
Sep 11 08:47:57 router postfix/qmgr[4388]: D317F3698CA: from=<best4g@club-internet.fr>, size=2954, nrcpt=50 (queue active)
Sep 11 08:47:57 router postfix/smtp[4440]: DCC77355F7D: host ecis.com[206.180.224.209] said: 451 4.1.8 ACCESS DELAYED Possibly forged hostname for 195.177.73.203 have your system administrator fix your DNS (in reply to RCPT TO command)
Sep 11 08:47:57 router postfix/smtp[4440]: DCC77355F7D: host ecis.com[206.180.224.209] said: 451 4.1.8 ACCESS DELAYED Possibly forged hostname for 195.177.73.203 have your system administrator fix your DNS (in reply to RCPT TO command)
Sep 11 08:47:57 router postfix/qmgr[4388]: D4BE33879D6: from=<best4g@club-internet.fr>, size=2954, nrcpt=30 (queue active)
Sep 11 08:47:57 router postfix/qmgr[4388]: DC4383655FD: from=<alimaasif@cantv.net>, size=3915, nrcpt=10 (queue active)
Sep 11 08:47:57 router postfix/smtp[4407]: D0EDC368E89: host mx2.gawab.com[66.220.20.52] said: 422 Server busy. Please try again later (#4.3.1) (in reply to RCPT TO command)
Sep 11 08:47:57 router postfix/smtp[4407]: D0EDC368E89: lost connection with mx2.gawab.com[66.220.20.52] while sending DATA command
Sep 11 08:47:57 router postfix/qmgr[4388]: D98E1364FC9: from=<alimaasif@cantv.net>, size=3915, nrcpt=40 (queue active)
Sep 11 08:47:57 router postfix/smtp[4423]: D175B27FC40: to=<bwayshea@aol.com>, relay=mailin-04.mx.aol.com[64.12.138.88], delay=325984, status=deferred (host mailin-04.mx.aol.com[64.12.138.88] said: 421-:  (DYN:T1)  http://postmaster.info.aol.com/errors/421dynt1.html 421 SERVICE NOT AVAILABLE (in reply to end of DATA command))
Sep 11 08:47:57 router postfix/smtp[4423]: D175B27FC40: to=<bxlulu1@aol.com>, relay=mailin-04.mx.aol.com[64.12.138.88], delay=325984, status=deferred (host mailin-04.mx.aol.com[64.12.138.88] said: 421-:  (DYN:T1)  http://postmaster.info.aol.com/errors/421dynt1.html 421 SERVICE NOT AVAILABLE (in reply to end of DATA command))
Sep 11 08:47:57 router postfix/qmgr[4388]: D7AAB359956: from=<alima_asif@cantv.net>, size=4116, nrcpt=10 (queue active)

Имхо через мой стервер лупят спам..но вроде релеинга у мну для чужих сетей нет

Вырубил внутреннюю сетку
все равно лупят.
.
вот конфиг postfix-а
[root@router ~]# cat /etc/postfix/main.cf
#
#-----------------CLAMAV----------------------#
content_filter = scan:127.0.0.1:10025
receive_override_options = no_address_mappings
#---------------------------------------------#
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
default_privs = nobody
#---------------------------------------------#
myhostname = router.cei.com.ua
mydomain = cei.com.ua
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, tynnyi.com
local_recipient_maps = unix:passwd.byname $alias_maps $virtual_mailbox_maps
unknown_local_recipient_reject_code = 550
smtpd_client_restrictions = reject_unknown_client
mynetworks = 127.0.0.1/8, 192.168.0.0/24
smtpd_sasl_auth_enable = yes
smtp_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
strict_rfc821_envelopes = yes
disable_vrfy_command = yes
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, check_helo_access hash:/etc/postfix/helo_access, check_helo_access regexp:/etc/postfix/helo_regexp, check_helo_access regexp:/etc/postfix/dul_checks, reject_invalid_hostname
smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, check_sender_access regexp:/etc/postfix/sender_access, reject_non_fqdn_sender, reject_unknown_sender_domain
smtpd_recipient_restrictions = reject_unauth_pipelining, permit_sasl_authenticated, permit_mynetworks, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unlisted_recipient, check_recipient_access regexp:/etc/postfix/recipient_access, reject_unauth_destination, reject_unknown_client
smtpd_client_restrictions = reject_unknown_client
#-------------------------------------------------#
smtpd_banner = HELLO cei.com.ua
#-------------------------------------------------#
mailbox_size_limit = 1000000000
alias_maps = hash:/etc/aliases
debug_peer_level = 2
debugger_command =
         PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
         xxgdb $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
setgid_group = postdrop
html_directory = no
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/postfix-2.3.3/samples
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
#-------------------------------------------------#

Высказать мнение | Ответить | Правка | Cообщить модератору

Оглавление

  • Posfix -  spam!!, 100matolog, 13:30 , 11-Сен-09, (1)  

Сообщения по теме [Сортировка по времени | RSS]


1. "Posfix -  spam!!"  +/
Сообщение от 100matolog (??) on 11-Сен-09, 13:30 
>[оверквотинг удален]
>& sleep 5
>sendmail_path = /usr/sbin/sendmail.postfix
>newaliases_path = /usr/bin/newaliases.postfix
>mailq_path = /usr/bin/mailq.postfix
>setgid_group = postdrop
>html_directory = no
>manpage_directory = /usr/share/man
>sample_directory = /usr/share/doc/postfix-2.3.3/samples
>readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
>#-------------------------------------------------#

починил
там в спуле лежал мильон с копейками писем - почистил очередь - все стало арбайтен

Высказать мнение | Ответить | Правка | Наверх | Cообщить модератору

Архив | Удалить

Индекс форумов | Темы | Пред. тема | След. тема




Партнёры:
PostgresPro
Inferno Solutions
Hosting by Hoster.ru
Хостинг:

Закладки на сайте
Проследить за страницей
Created 1996-2024 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру