Merhaba, ehlo çıktısı aşağıda.. smtp-auth auth plain ile denediğimde çalışıyor görünüyor.. Ayrıca ordb kullanıyorum..
Teşekkürler.. Trying 213.194.113.66... Connected to host-213-194-113-66.borusantelekom.com. Escape character is '^]'. 220 web.altinbasak.com ESMTP ehlo 250-web.altinbasak.com 250-AUTH LOGIN CRAM-MD5 PLAIN 250-AUTH=LOGIN CRAM-MD5 PLAIN 250-PIPELINING 250 8BITMIME ----- Original Message ----- From: "Mesut GÜLNAZ" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Wednesday, October 19, 2005 1:01 PM Subject: Re: [FreeBSD] qmail problemi > qmail/current dosyasını tail -f ile izlerseniz bu mailleri hangi IP lerin > gönderdiğini öğrenebilirseniz. > unutmayınız ki pop3 ya da smtp den mail alıp verebilen bir kullanıcının PC > sine virüs bulaştı ise express erişimi geçici olarak relay a açıldığından > böyle bir durum söz konusu. ya da içeride bir vatandaş sadece spam için bir > mail server kurmuş olabilir. ama sizin serverdan çıkmaması gerek bu > durumda. o nedenle ilk yol IP leri bulmanız. eğer WAN IP ise smtp-relay > patch i kontrol ediniz. eğer patch var ise o IP nin ordb kullanıyorsanız > orada mevcut olup olmamamsına bakınız. daha bir çok şey söylenebilir. > > iyi çalışmalar.. > > #telnet localhost 25 > #ehlo > > çııtısı nasıl? ordb kullanıyor musunuz? > > > ----- Original Message ----- > From: "Umut D." <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Wednesday, October 19, 2005 10:59 AM > Subject: Re: [FreeBSD] qmail problemi > > > > Mail sunucunuzdan relay yapan baska bir sunucu vs var mi? > > Ornegin relay izni verilmis bir web sunucu gibi. Bazi scriptlerin > > aciklarindan istifade ile bu tip spamlar yapilabiliyor. > > > > Daha otesi, kullanicilar icinde window$ kullananlarin bilgisayarlarinda > > virus olabilir, boylece smtp-auth islemini de gerceklestirip > > outlook/express > > uzerinden spam yapabilirler. > > > > Maillerin basliklarini acip geldikleri ilk kaynagi bulmaya calisin. > > Ya da loglardan takip ederek hangi uzak sistemden yola ciktiklarini > > gorun derim size :) > > > > Kolay gelsin. > > > > Not: Bu arada gonderdiginiz ekran goruntusu hangi programa ait? > > > > Ahmet ORHAN wrote: > > > >> Merhaba, > >> Qmail- Mail Queue kısmına baktığımda, yabancı adreslerden biryerlere > >> mail gönderiliyor.. Kuyruk bu yüzden sürekli dolu oluyor.. > >> Qmailde relay tanımlamaları yapılmış durumda.. Smtp-auth > >> uygulandı..ancak sunucumuz üzerinde başka başka adresler görmeye devam > >> ediyorum. > >> Teşekkürler.. > >> ............qmail-smtp................................. > >> #!/bin/sh > >> QMAILDUID=`id -u vpopmail` > >> NOFILESGID=`id -g vpopmail` > >> MAXSMTPD=`cat /var/qmail/control/concurrencyincoming` > >> LOCAL=`head -1 /var/qmail/control/me` > >> if [ -z "$QMAILDUID" -o -z "$NOFILESGID" -o -z "$MAXSMTPD" -o -z > >> "$LOCAL" ]; then > >> echo QMAILDUID, NOFILESGID, MAXSMTPD, or LOCAL is unset in > >> echo /var/qmail/supervise/qmail-smtpd/run > >> exit 1 > >> fi > >> if [ ! -f /var/qmail/control/rcpthosts ]; then > >> echo "No /var/qmail/control/rcpthosts!" > >> echo "Refusing to start SMTP listener because it'll create an open relay" > >> exit 1 > >> fi > >> exec /usr/local/bin/softlimit -m 40000000 \ > >> /usr/local/bin/tcpserver -H -P -R -l "$LOCAL" -x > >> /usr/local/vpopmail/etc/tcp.smtp.cdb -c "$MAXSMTPD" \ > >> -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \ > >> /usr/local/bin/rblsmtpd -r relays.ordb.org \ > >> /var/qmail/bin/qmail-smtpd 2>&1 > >> ............................................................. > > ------------------------------------------------------------------------ > >> Messages 1 to 20 of 119 > >> <https://192.168.0.10:10000/qmailadmin/list_queue.cgi?start=20> > >> > >> Select all Invert selection > >> *Mail ID* *Sent* *From* *To* > >> 86224 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/20/86224> > >> 15 Oct 2005 07:58:08 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> 86273 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/0/86273> > >> 17 Oct 2005 11:00:21 <> [EMAIL PROTECTED] > >> 86276 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/3/86276> > >> 15 Oct 2005 07:43:26 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> 86277 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/4/86277> > >> 17 Oct 2005 10:50:22 <> [EMAIL PROTECTED] > >> 86281 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/8/86281> > >> 17 Oct 2005 08:02:20 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> 86282 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/9/86282> > >> 14 Oct 2005 12:27:09 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> 86283 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/10/86283> > >> 17 Oct 2005 08:44:39 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> 86288 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/15/86288> > >> 17 Oct 2005 10:36:55 <> [EMAIL PROTECTED] > >> 86290 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/17/86290> > >> 15 Oct 2005 07:32:36 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> 86292 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/19/86292> > >> 17 Oct 2005 09:34:33 <> [EMAIL PROTECTED] > >> 86294 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/21/86294> > >> 17 Oct 2005 08:18:43 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> 86296 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/0/86296> > >> 17 Oct 2005 12:45:18 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> 86301 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/5/86301> > >> 14 Oct 2005 13:51:43 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> 86303 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/7/86303> > >> 14 Oct 2005 12:27:06 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> 86310 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/14/86310> > >> 17 Oct 2005 07:56:14 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> 86320 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/1/86320> > >> 17 Oct 2005 11:01:00 <> [EMAIL PROTECTED] > >> 86325 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/6/86325> > >> 17 Oct 2005 07:56:57 <> [EMAIL PROTECTED] > >> 86334 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/15/86334> > >> 17 Oct 2005 08:33:30 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> 86335 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/16/86335> > >> 17 Oct 2005 11:01:21 <> [EMAIL PROTECTED] > >> 86337 > >> <https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/ mess/18/86337> > >> 17 Oct 2005 12:49:13 <[EMAIL PROTECTED]> [EMAIL PROTECTED] > >> > >> ............................................................................ ............... > >> > >> Ahmet ORHAN > >> Bilgi İşlem > >> ALTINBAŞAK TEKSTİL A.Ş. > >> Tel : 0 258 269 10 69 > >> Fax: 0 258 269 10 70 > >> www.altinbasak.com <http://www.altinbasak.com> > > > > > > > > --------------------------------------------------------------------- > > Cikmak icin, e-mail: [EMAIL PROTECTED] > > Liste arsivi: http://lists.enderunix.org > > Turkiye'nin ilk FreeBSD kitabi: http://www.acikakademi.com/freebsd.php > > > > > > > > > --------------------------------------------------------------------- > Cikmak icin, e-mail: [EMAIL PROTECTED] > Liste arsivi: http://lists.enderunix.org > Turkiye'nin ilk FreeBSD kitabi: http://www.acikakademi.com/freebsd.php > > > --------------------------------------------------------------------- Cikmak icin, e-mail: [EMAIL PROTECTED] Liste arsivi: http://lists.enderunix.org Turkiye'nin ilk FreeBSD kitabi: http://www.acikakademi.com/freebsd.php
