Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-11 Thread Jeroen Geilman
On 09/07/2013 05:19 AM, FliedRice wrote: Just a thought, In order to block more incoming spam you could add more rbl's to your main.cf file. I have spamassassin, but it's turned off in favor of the following smtpd restrictions and domain blocking in the plesk user interface, or filtering in the

spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
Hello, I have a postfix server for many years. The anti-spam filters were ok, I got in general just a couple of spams per day. Since a month or so, I start getting more than 100 spams for every user on a specific account/domain per

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Wietse Venema
wiseadmin: I have a postfix server for many years. The anti-spam filters were ok, I got in general just a couple of spams per day.br br Since a month or so, I start getting more than 100 spams for every user on a specific account/domain per

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Wijatmoko U. Prayitno
On Fri, 06 Sep 2013 16:43:27 +0300 wiseadmin wisead...@gmail.com wrote: and the same message from postfix logs: /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: uid=1018 from=stronges...@google.com The email came from local user uid 1018 (service pickup). --

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
And what does it mean? uid 1018 is the user under witch spamd runs. #grep 1018 /etc/passwd spamd:x:1018:1019::/home/spamd:/bin/bash I don't know how to interpret the fact that is comes from pickup service. Is my server compromised? Thanks. On 09/06/2013 04:51 PM, Wijatmoko U. Prayitno

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
Ok, this is a solution. I tried to avoid this because it consumes some resources. I have problems ONLY with this specific spam. I try to find out if there is something like this: - reject all emails that come from a different server to my server and have the From: header a local address (on

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Wietse Venema
Wijatmoko U. Prayitno: On Fri, 06 Sep 2013 16:43:27 +0300 wiseadmin wisead...@gmail.com wrote: and the same message from postfix logs: /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: uid=1018 from=stronges...@google.com The email came from local user uid

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Tonu Samuel
On Fri, 2013-09-06 at 21:10 +0700, Wijatmoko U. Prayitno wrote: On Fri, 6 Sep 2013 10:05:49 -0400 (EDT) wie...@porcupine.org (Wietse Venema) wrote: /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: uid=1018 from=stronges...@google.com The email came from local

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
I installed SA last week and I started to reveive these spams 1-2 months ago. # netstat -tupan | grep spam tcp0 0 127.0.0.1:783 0.0.0.0:* LISTEN 27752/spamd.pid What tests should I do next? This is a production server, I'am starting to become afraid. What was

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Wijatmoko U. Prayitno
On Fri, 6 Sep 2013 10:05:49 -0400 (EDT) wie...@porcupine.org (Wietse Venema) wrote: /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: uid=1018 from=stronges...@google.com The email came from local user uid 1018 (service pickup). Good observation. This message did

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
All emails are reveived through smtp and then they are passed to spamd, inspected and delivered. If I say something stupid, please excuse me, I am experienced with linux and networking in general bun not to postfix and email servers. I sent an email to myself

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Stan Hoeppner
On 9/6/2013 9:05 AM, Wietse Venema wrote: Wijatmoko U. Prayitno: On Fri, 06 Sep 2013 16:43:27 +0300 wiseadmin wisead...@gmail.com wrote: and the same message from postfix logs: /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: uid=1018 from=stronges...@google.com

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread FliedRice
, holidays, Valentines , Love , amp; just because! -- View this message in context: http://postfix.1071664.n5.nabble.com/spam-headers-from-ME-to-ME-but-different-anvelope-sender-tp61232p61250.html Sent from the Postfix Users mailing list archive at Nabble.com.