Hi all,
Mike Tremaine wrote: > > > Are you sure the box in question is routing through the Endian box? > Seems odd that you can;t stop it at the application level [postfix] nor > the ip traffic via iptables. Can you use tcpdump to verify traffic from > this host is going across the interface? > > -Mike > > ------------------------------------------------------------------------------ > Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, > CA > -OSBC tackles the biggest issue in open source: Open Sourcing the > Enterprise > -Strategies to boost innovation and cut costs with open source > participation > -Receive a $600 discount off the registration fee with the source code: > SFAD > http://p.sf.net/sfu/XcvMzF8H > _______________________________________________ > Efw-user mailing list > Efw-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/efw-user > > I found the issue last night quiet late. Can kick myselft now. The problem was that although I had put all the messages in incoming,deferred and active on hold there was still about 30000 email in maildrop. So they were constantly refreshing the incoming que making it look like the client was still connected. I should have connected the dots. Thats why there was no network traffic caught by iptables and why the postfix access entry didn't work! Even netstat showed nothing coming from the IP address. Sorry for being doff but at least I learn something new. Check the maildrop queue. Part of the reason I didn't is that the documentation for postfix, postsuper,postqueue,qshape etc hardly ever mention maildrop as a queue! I did a "postsuper -h ALL maildrop" and that stopped the spam. Busy running scripts to release the mail that is valid. Thanks for all the help everyone. ----- http://www.jumpingbean.co.za Jumping bean your java and linux experts http://www.cyberconnect.co.za Cyber Connect - ADSL,3g,HSDPA,iBurst http://www.ip-pbx.co.za VOIP, IP-PBX specialists http://www.onsitetechsupport.co.za On Site IT Support -- View this message in context: http://www.nabble.com/How-to-block-internal-smtp-spam-client-tp22208853p22217956.html Sent from the efw-user mailing list archive at Nabble.com. ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ Efw-user mailing list Efw-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/efw-user
