Re: Bombarded With Spam

2017-09-24 Thread Wietse Venema
Wietse Venema: > Kirk Bocek: > > Sep 24 11:10:12 amber postfix/pickup[12058]: 6C5C41FCB3: uid=497 > > from= > > They are spamming through some local aplication, perhaps a web > service. What process is running as UID=497? > > $ grep '497:' /etc/passwd In other words

Re: Bombarded With Spam

2017-09-24 Thread Wietse Venema
Kirk Bocek: > Sep 24 11:10:12 amber postfix/pickup[12058]: 6C5C41FCB3: uid=497 > from= They are spamming through some local aplication, perhaps a web service. What process is running as UID=497? $ grep '497:' /etc/passwd Wietse

Re: Bombarded With Spam

2017-09-24 Thread Kirk Bocek
On 9/24/2017 1:50 PM, Wietse Venema wrote: Kirk Bocek: I inadvertently set open relay on my server sometime ago. I've fixed it but I am now bombarded with spam messages. I'm seeing messages like: 6C5C41FCB3 5940 Sun Sep 24 11:10:12 bdnqkqhakis...@sfilc.com (delivery temporarily suspended:

Re: Bombarded With Spam

2017-09-24 Thread Kirk Bocek
On 9/24/2017 2:05 PM, Benny Pedersen wrote: Kirk Bocek skrev den 2017-09-24 22:27: Here is postconf -n: mydestination = $myhostname, localhost.$mydomain, localhost,    pvt, bocek.org,  bocekrealty.com relay_domains = $mydestination, localhost, $myhostname relay_recipient_maps =

Re: Bombarded With Spam

2017-09-24 Thread Wietse Venema
Kirk Bocek: > I inadvertently set open relay on my server sometime ago. I've fixed it > but I am now bombarded with spam messages. I'm seeing messages like: > > 6C5C41FCB3 5940 Sun Sep 24 11:10:12 bdnqkqhakis...@sfilc.com > (delivery temporarily suspended: lost connection with >

Re: Bombarded With Spam

2017-09-24 Thread Kirk Bocek
On 9/24/2017 11:34 AM, Benny Pedersen wrote: Kirk Bocek skrev den 2017-09-24 20:25: That fill up my mailq. I've since blocked sflic.com but I get others with a gmail.com domain. How do I block or reject these messages? google loopback-only is the most simple one :) more help post

Re: Bombarded With Spam

2017-09-24 Thread Benny Pedersen
Kirk Bocek skrev den 2017-09-24 20:25: That fill up my mailq. I've since blocked sflic.com but I get others with a gmail.com domain. How do I block or reject these messages? google loopback-only is the most simple one :) more help post postconf -n

Bombarded With Spam

2017-09-24 Thread Kirk Bocek
I inadvertently set open relay on my server sometime ago. I've fixed it but I am now bombarded with spam messages. I'm seeing messages like: 6C5C41FCB3 5940 Sun Sep 24 11:10:12  bdnqkqhakis...@sfilc.com (delivery temporarily suspended: lost connection with