Hi, i think from=<> is empty or unknown, also this messages comes from log 4-5 times per second. we think some kind attack or mallware thing. but i'm not sure RCPT from > xedge2.campus.tue.nl[131.155.6.117]
ip is real or not ? also the user in from part of log is a driver(no offence), i 'm sure he looks mail once a day, and he is on vacation . :) thanks in advance. On Fri, May 30, 2014 at 2:35 PM, Wietse Venema <wie...@porcupine.org> wrote: > Selcuk Yazar: > > May 30 10:00:04 mail postfix/smtpd[6756]: NOQUEUE: reject: RCPT from > > xedge2.campus.tue.nl[131.155.6.117]: 450 4.7.1 <>: Sender address > rejected: > > Access denied; from=<> to=<u...@domain.edu.tr> proto=ESMTP helo=< > > XEDGE2.campus.tue.nl> > [three more examples rejecting mail from <>] > > Why are you rejecting mail from <>? > > TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail > > TO (UN)SUBSCRIBE see http://www.postfix.org/lists.html > > Thank you for using Postfix. > > Wietse > -- Selçuk YAZAR
