On Mon, June 13, 2016 16:42, Wietse Venema wrote:
> James B. Byrne:
>> These delivery names are only found in /etc/postfix/virtual.
>
> What about an email "address book" on a user machine?
>
> Wietse
>
It is certainly a possibility. However, my difficulty with that
explanation is that:
1. Our users employ webmail (squirrelmail) so their address books are
maintained on a sealed server. There are no user accounts on it. And
we run aide on it. And we have fail2ban running. And ssh is blocked
at the firewall.
2. Some of these addresses like xxxx.bugzilla and xxxx.redhat are only
used for bug reporting. They would be found on the respective sites
but it seems to me doubtful that they would end up in a user address
book.
3. If there is nothing that involves Postfix then something like what
you propose must be the case. Or someone has gone to some lengths to
scan for these addresses using our domain name as a search term.
--
*** e-Mail is NOT a SECURE channel ***
Do NOT transmit sensitive data via e-Mail
Do NOT open attachments nor follow links sent by e-Mail
James B. Byrne mailto:[email protected]
Harte & Lyne Limited http://www.harte-lyne.ca
9 Brockley Drive vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada L8E 3C3
