Re: spamming mailbox ?

2018-06-18 Thread Poliman - Serwis 
Thank you Tom for answer. For me is quite strange, because
do_not_re...@s1.poliman.net is my mailbox. I didn't send any email to
emailemailemailemailemailem...@emailemailemail.com. Btw, how do you know
that receiving server does not exists - due to failing connection on 25
port?

2018-06-15 9:37 GMT+02:00 Tom Hendrikx :

>
>
> On 14-06-18 15:27, Poliman - Serwis wrote:
> > I check the mail queue and the logs and this time I found some strange
> > thing. I used command "grep -r "emailemailemail.com
> > " /var/log/mail.log" and result is in
> > attached .txt file. If I understand properly there is many tries to send
> > from do_not_re...@s1.poliman.net  to
> > emailemailemailemailemailem...@emailemailemail.com
> >  but nothing
> > happens later because of failing connection to emailemailemail.com
> >  on port 25.
> >
>
> Yes, that are many attempts to deliver the same email. Because the
> receiving server does not exist, the message is kept in the queue and
> retried later.
>
> This is easily visible because all log messages show the same queue id
> (9438613CE9E). This will continue until maximal_queue_lifetime (default
> 5d) is reached.
>
> Kind regards,
> Tom
>



-- 

*Pozdrawiam / Best Regards*
*Piotr Bracha*

Re: spamming mailbox ?

2018-06-15 Thread Tom Hendrikx 



On 14-06-18 15:27, Poliman - Serwis wrote:
> I check the mail queue and the logs and this time I found some strange
> thing. I used command "grep -r "emailemailemail.com
> " /var/log/mail.log" and result is in
> attached .txt file. If I understand properly there is many tries to send
> from do_not_re...@s1.poliman.net  to
> emailemailemailemailemailem...@emailemailemail.com
>  but nothing
> happens later because of failing connection to emailemailemail.com
>  on port 25.
> 

Yes, that are many attempts to deliver the same email. Because the
receiving server does not exist, the message is kept in the queue and
retried later.

This is easily visible because all log messages show the same queue id
(9438613CE9E). This will continue until maximal_queue_lifetime (default
5d) is reached.

Kind regards,
Tom

spamming mailbox ?

2018-06-14 Thread Poliman - Serwis 
I check the mail queue and the logs and this time I found some strange
thing. I used command "grep -r "emailemailemail.com" /var/log/mail.log" and
result is in attached .txt file. If I understand properly there is many
tries to send from do_not_re...@s1.poliman.net to
emailemailemailemailemailem...@emailemailemail.com but nothing happens
later because of failing connection to emailemailemail.com on port 25.

-- 

*Pozdrawiam / Best Regards*
*Piotr Bracha*
Jun 13 10:37:49 s1 postfix/submission/smtpd[12023]: NOQUEUE: filter: RCPT from 
host-93.179.231.31.static.3s.pl[93.179.231.31]: : 
Sender address triggers FILTER amavis:[127.0.0.1]:10026; 
from= 
to= proto=ESMTP 
helo=
Jun 13 10:37:52 s1 amavis[9634]: (09634-09) Passed CLEAN {RelayedOutbound}, 
ORIGINATING LOCAL [93.179.231.31]:58040 [93.179.231.31] 
 -> 
, Queue-ID: 9413813CE96, 
Message-ID: <87af5346-f200-1714-7a80-3b1cb863f...@s1.poliman.net>, mail_id: 
oO_C8gbzbKtk, Hits: 0.741, size: 1499, queued_as: 9438613CE9E, 2871 ms
Jun 13 10:37:52 s1 postfix/smtp[12028]: 9413813CE96: 
to=, 
relay=127.0.0.1[127.0.0.1]:10026, delay=3.1, delays=0.18/0.02/0.01/2.9, 
dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10027): 250 2.0.0 
Ok: queued as 9438613CE9E)
Jun 13 10:38:22 s1 postfix/smtp[12038]: connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out
Jun 13 10:38:52 s1 postfix/smtp[12038]: connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out
Jun 13 10:38:52 s1 postfix/smtp[12038]: 9438613CE9E: 
to=, relay=none, delay=60, 
delays=0.02/0.03/60/0, dsn=4.4.1, status=deferred (connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out)
Jun 13 10:45:06 s1 postfix/smtp[13384]: connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out
Jun 13 10:45:36 s1 postfix/smtp[13384]: connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out
Jun 13 10:45:36 s1 postfix/smtp[13384]: 9438613CE9E: 
to=, relay=none, delay=464, 
delays=403/0.02/60/0, dsn=4.4.1, status=deferred (connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out)
Jun 13 10:55:07 s1 postfix/smtp[15766]: connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out
Jun 13 10:55:37 s1 postfix/smtp[15766]: connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out
Jun 13 10:55:37 s1 postfix/smtp[15766]: 9438613CE9E: 
to=, relay=none, 
delay=1064, delays=1004/0.03/60/0, dsn=4.4.1, status=deferred (connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out)
Jun 13 11:15:07 s1 postfix/smtp[20723]: connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out
Jun 13 11:15:37 s1 postfix/smtp[20723]: connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out
Jun 13 11:15:37 s1 postfix/smtp[20723]: 9438613CE9E: 
to=, relay=none, 
delay=2265, delays=2204/0.02/61/0, dsn=4.4.1, status=deferred (connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out)
Jun 13 11:55:06 s1 postfix/smtp[30523]: connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out
Jun 13 11:55:36 s1 postfix/smtp[30523]: connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out
Jun 13 11:55:36 s1 postfix/smtp[30523]: 9438613CE9E: 
to=, relay=none, 
delay=4664, delays=4604/0.02/60/0, dsn=4.4.1, status=deferred (connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out)
Jun 13 13:05:06 s1 postfix/smtp[15318]: connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out
Jun 13 13:05:36 s1 postfix/smtp[15318]: connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out
Jun 13 13:05:37 s1 postfix/smtp[15318]: 9438613CE9E: 
to=, relay=none, 
delay=8864, delays=8804/0.01/61/0, dsn=4.4.1, status=deferred (connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out)
Jun 13 14:15:06 s1 postfix/smtp[32630]: connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out
Jun 13 14:15:36 s1 postfix/smtp[32630]: connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out
Jun 13 14:15:36 s1 postfix/smtp[32630]: 9438613CE9E: 
to=, relay=none, 
delay=13064, delays=13004/0.02/60/0, dsn=4.4.1, status=deferred (connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out)
Jun 13 15:25:07 s1 postfix/smtp[17237]: connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out
Jun 13 15:25:37 s1 postfix/smtp[17237]: connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out
Jun 13 15:25:37 s1 postfix/smtp[17237]: 9438613CE9E: 
to=, relay=none, 
delay=17264, delays=17204/0.04/60/0, dsn=4.4.1, status=deferred (connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out)
Jun 13 16:35:07 s1 postfix/smtp[6638]: connect to 
emailemailemail.com[52.55.168.146]:25: Connection timed out
Jun 13 16:35:37 s1 postfix/smtp[6638]: connect to 
emailemailemail.com[54.80.72.81]:25: Connection timed out
Jun 13 16:35:37 s1 postfix/smtp[6638]: 9438613CE9E: 
to=, relay=none, 
delay=21465, delays=21405/0.03/60/0,