Am 30.05.2014 13:51, schrieb Selcuk Yazar:
> i think from=<> is empty or unknown

you should not think, you should learn some basics
*before* setup public MTA's

<> is the NULL sender used for bounces, responders and sender verifyication
you *MUST* accept that sender by RFC

http://en.wikipedia.org/wiki/Bounce_message

> also this messages comes from log 4-5 times per second. we think some kind
> attack or mallware thing. but i'm not sure RCPT from
>> xedge2.campus.tue.nl <http://xedge2.campus.tue.nl/>[131.155.6.117]

maybe *you are* the root cause sending out bogus mails
via a hacked account or backscattering and other misconfigured
servers are sending bounces instead reject

> ip is real or not ? also the user in from part of log is a driver(no 
> offence), i 'm sure he looks mail once a day,
> and he is on vacation . :)
> 
> thanks in advance.
>  
> On Fri, May 30, 2014 at 2:35 PM, Wietse Venema <wie...@porcupine.org 
> <mailto:wie...@porcupine.org>> wrote:
> 
>     Selcuk Yazar:
>     > May 30 10:00:04 mail postfix/smtpd[6756]: NOQUEUE: reject: RCPT from
>     > xedge2.campus.tue.nl <http://xedge2.campus.tue.nl>[131.155.6.117]: 450 
> 4.7.1 <>: Sender address rejected:
>     > Access denied; from=<> to=<u...@domain.edu.tr 
> <mailto:u...@domain.edu.tr>> proto=ESMTP helo=<
>     > XEDGE2.campus.tue.nl <http://XEDGE2.campus.tue.nl>>
>     [three more examples rejecting mail from <>]
> 
>     Why are you rejecting mail from <>?
> 
>     TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail
> 
>     TO (UN)SUBSCRIBE see http://www.postfix.org/lists.html
> 
>     Thank you for using Postfix.

Reply via email to