Zitat von Eero Volotinen <[email protected]>:
Braun Björn wrote:
My logs (mail.log)
Nov 5 10:07:56 grey2 postfix/smtpd[7153]: connect from
unknown[ddd.dd.ddd.dd]
Nov 5 10:07:56 grey2 postfix/smtpd[7153]: NOQUEUE: reject: RCPT
from unknown[ddd.dd.ddd.dd]: 450 4.7.1 <[email protected]>: Recipient
address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/aaa.DE.html;
from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail.bbb.com>
Nov 5 10:07:56 grey2 postfix/smtpd[7153]: lost connection after
RSET from unknown[ddd.dd.ddd.dd]
Nov 5 10:07:56 grey2 postfix/smtpd[7153]: disconnect from
unknown[ddd.dd.ddd.dd]
Or are these the wrong logs?
Well, looks like spammer is connecting from ddd.dd.ddd.dd and after
graylisting (45X temporary error) spammer software just drops
connection.
This depends if "[email protected]" is missing a mail from "[email protected]" and
"ddd.dd.ddd.dd" is a valid mailserver for "bbb.com" then the problem
is worth to investigate.
Regards
Andreas
