Honestly, I am not using, spamdyke. Does spamtyke appends all the log to /var/log/maillog? also seems spamdyke is rejecting these mails. Is this current log? if so somebody still sending mails. Can't you get any information from /var/log/qmail/smtp/current regarding this?
On Tue, Jun 22, 2010 at 5:43 PM, Rafael Andrade <[email protected]>wrote: > Look in /var/log/maillog > > Jun 22 09:02:10 net spamdyke[5028]: DENIED_RDNS_MISSING from: (unknown) to: > [email protected] origin_ip: 189.2.134.108 origin_rdns: (unknown) > auth: (unknown) > Jun 22 09:02:11 net spamdyke[5024]: DENIED_RDNS_MISSING from: > [email protected] to: [email protected] origin_ip: > 79.189.227.34 origin_rdns: (unknown) auth: (unknown) > Jun 22 09:02:14 net spamdyke[5025]: DENIED_RDNS_MISSING from: > [email protected] to: [email protected] origin_ip: 80.184.67.122 > origin_rdns: (unknown) auth: (unknown) > Jun 22 09:02:14 net spamdyke[5026]: DENIED_RDNS_RESOLVE from: (unknown) to: > [email protected] origin_ip: 209.113.141.35 origin_rdns: > mlsvr01.mindleaf.com auth: (unknown) > Jun 22 09:02:44 net spamdyke[5033]: DENIED_RDNS_MISSING from: (unknown) to: > [email protected] origin_ip: 200.143.203.70 origin_rdns: (unknown) > auth: (unknown) > Jun 22 09:02:50 net spamdyke[5032]: DENIED_OTHER from: > [email protected] to: [email protected] origin_ip: > 200.185.80.78 origin_rdns: smtp4.votorantim.com.br auth: (unknown) > Jun 22 09:03:09 net spamdyke[5043]: DENIED_RDNS_MISSING from: (unknown) to: > [email protected] origin_ip: 202.181.238.101 origin_rdns: (unknown) > auth: (unknown) > Jun 22 09:03:26 net spamdyke[5046]: DENIED_RDNS_MISSING from: (unknown) to: > [email protected] origin_ip: 200.14.68.55 origin_rdns: (unknown) > auth: (unknown) > Jun 22 09:03:30 net spamdyke[5050]: DENIED_RDNS_MISSING from: (unknown) to: > [email protected] origin_ip: 200.228.168.2 origin_rdns: (unknown) > auth: (unknown) > Jun 22 09:03:42 net spamdyke[5106]: DENIED_RDNS_MISSING from: (unknown) to: > [email protected] origin_ip: 200.228.168.2 origin_rdns: (unknown) > auth: (unknown) > Jun 22 09:03:53 net spamdyke[5108]: DENIED_RBL_MATCH from: (unknown) to: > [email protected] origin_ip: 201.76.223.15 origin_rdns: > send.wnetrj.com.br auth: (unknown) > > > The ips are spoofing? > Actually im not using 587 port > Im using vpopmail to auth my users. > > Thanks so much!! > > > > > senthil vel escreveu: > >> Seems some one is spamming. Any one of your mail account might be >> compromised. The server is using port 587 to accept mails from local users? >> . /var/log/qmail/submission or /var/log/qmail/smtp will tell the truth. >> >> say for example, search for "[email protected] <mailto: >> [email protected]>" in above mentioned logs. So that we can get >> the origination of this mail. If it is using a local mail id for >> authentication, reset the password of the mail. Also remove the mails in >> queue using qmail-remove. >> >> --Senthilvel. >> >> >> On Tue, Jun 22, 2010 at 4:29 PM, Rafael Andrade >> <[email protected]<mailto: >> [email protected]>> wrote: >> >> Hello list, >> >> I have a production server with qmailtoaster on centos running 2 >> years perfectly, recently the server stuck, with many messages in >> queue, i need to stop qmail, clean the queue and running qmail >> again, but i need a solution to fix this problem, any knows or can >> help? >> >> Thanks so much >> >> Examples in queue: >> >> Client = Hide Client Domain >> >> [r...@net ~]# qmailctl queue | head >> messages in queue: 14691 >> messages in queue but not yet preprocessed: 2 >> 21 Jun 2010 22:45:02 GMT #3087267 1435 <[email protected] >> <mailto:[email protected]>> >> remote [email protected] <mailto:[email protected]> >> >> 21 Jun 2010 22:34:44 GMT #3069258 1430 <[email protected] >> <mailto:[email protected]>> >> remote [email protected] <mailto:[email protected]> >> >> 21 Jun 2010 22:44:39 GMT #3079585 1439 <[email protected] >> <mailto:[email protected]>> >> >> remote [email protected] >> <mailto:[email protected]> >> >> 22 Jun 2010 00:02:57 GMT #2443198 1438 <[email protected] >> <mailto:[email protected]>> >> remote [email protected] >> <mailto:[email protected]> >> >> >> Thanks so much >> >> >> >> >> >> --------------------------------------------------------------------------------- >> Qmailtoaster is sponsored by Vickers Consulting Group >> (www.vickersconsulting.com <http://www.vickersconsulting.com>) >> >> Vickers Consulting Group offers Qmailtoaster support and >> installations. >> If you need professional help with your setup, contact them today! >> >> >> --------------------------------------------------------------------------------- >> Please visit qmailtoaster.com <http://qmailtoaster.com> for the >> >> latest news, updates, and packages. >> To unsubscribe, e-mail: >> [email protected] >> <mailto:[email protected]> >> >> For additional commands, e-mail: >> [email protected] >> <mailto:[email protected]> >> >> >> >> > > --------------------------------------------------------------------------------- > Qmailtoaster is sponsored by Vickers Consulting Group ( > www.vickersconsulting.com) > Vickers Consulting Group offers Qmailtoaster support and installations. > If you need professional help with your setup, contact them today! > > --------------------------------------------------------------------------------- > Please visit qmailtoaster.com for the latest news, updates, and > packages. > To unsubscribe, e-mail: > [email protected] > For additional commands, e-mail: > [email protected] > > >
