Re: Bombarded With Spam

On 9/27/2017 3:02 AM, Matus UHLAR - fantomas wrote: Looks like sender address rejection. the error message seems to be custom, which means you should search for check_sender_access in your config file. Yes. Custom messages in sender_access you can't reject sender at HELO stage, because

Re: Bombarded With Spam

On 26.09.17 12:02, Kirk Bocek wrote: Thank you Benny and Wietse. Things are better now. However I have lots of log entries like: Sep 26 11:57:52 amber postfix/smtpd[11213]: NOQUEUE: reject: RCPT from unknown[10.0.2.1]: 554 5.7.1 : Sender address rejected: No Spam;

Re: Bombarded With Spam

On 9/25/2017 7:34 AM, Benny Pedersen wrote: Kirk Bocek skrev den 2017-09-25 16:04: So I need to receive email from bocek.org and then relay it elsewhere. That's why I put that there. Is that wrong? yes each domain must not be listed in both places, sinc postfix need to know how to deliver

Re: Bombarded With Spam

On 9/25/2017 7:34 AM, Benny Pedersen wrote: yes each domain must not be listed in both places, sinc postfix need to know how to deliver and route it to there destinations Okay, I set it back to mydestination = $myhostname, localhost.$mydomain, localhost The other stuff was me trying to

Re: Bombarded With Spam

Kirk Bocek skrev den 2017-09-25 16:04: So I need to receive email from bocek.org and then relay it elsewhere. That's why I put that there. Is that wrong? yes each domain must not be listed in both places, sinc postfix need to know how to deliver and route it to there destinations dont

Re: Bombarded With Spam

On 9/25/2017 3:28 AM, Benny Pedersen wrote: grep bocek.org main.cf | wc -l simple rule is that domain names is final destination for postfix, so if you have bocek.org in mydestination AND in virtual_domain it does not work as you want So I need to receive email from bocek.org and then

Re: Bombarded With Spam

Kirk Bocek skrev den 2017-09-25 00:21: Several complex things are happening. I need to accept mail from localhost for messages from an array controller. This host needs to relay mail from workstations on the LAN. This host is also accepting mail from several listed domains via the router.

Re: Bombarded With Spam

Wietse Venema: > Kirk Bocek: > > Sep 24 11:10:12 amber postfix/pickup[12058]: 6C5C41FCB3: uid=497 > > from= > > They are spamming through some local aplication, perhaps a web > service. What process is running as UID=497? > > $ grep '497:' /etc/passwd In other words

Re: Bombarded With Spam

Kirk Bocek: > Sep 24 11:10:12 amber postfix/pickup[12058]: 6C5C41FCB3: uid=497 > from= They are spamming through some local aplication, perhaps a web service. What process is running as UID=497? $ grep '497:' /etc/passwd Wietse

Re: Bombarded With Spam

On 9/24/2017 1:50 PM, Wietse Venema wrote: Kirk Bocek: I inadvertently set open relay on my server sometime ago. I've fixed it but I am now bombarded with spam messages. I'm seeing messages like: 6C5C41FCB3 5940 Sun Sep 24 11:10:12 bdnqkqhakis...@sfilc.com (delivery temporarily suspended

Re: Bombarded With Spam

On 9/24/2017 2:05 PM, Benny Pedersen wrote: Kirk Bocek skrev den 2017-09-24 22:27: Here is postconf -n: mydestination = $myhostname, localhost.$mydomain, localhost,    pvt, bocek.org,  bocekrealty.com relay_domains = $mydestination, localhost, $myhostname relay_recipient_maps =

Re: Bombarded With Spam

Kirk Bocek: > I inadvertently set open relay on my server sometime ago. I've fixed it > but I am now bombarded with spam messages. I'm seeing messages like: > > 6C5C41FCB3 5940 Sun Sep 24 11:10:12 bdnqkqhakis...@sfilc.com > (delivery temporarily suspended: lost connec

Re: Bombarded With Spam

On 9/24/2017 11:34 AM, Benny Pedersen wrote: Kirk Bocek skrev den 2017-09-24 20:25: That fill up my mailq. I've since blocked sflic.com but I get others with a gmail.com domain. How do I block or reject these messages? google loopback-only is the most simple one :) more help post

Re: Bombarded With Spam

Kirk Bocek skrev den 2017-09-24 20:25: That fill up my mailq. I've since blocked sflic.com but I get others with a gmail.com domain. How do I block or reject these messages? google loopback-only is the most simple one :) more help post postconf -n

Bombarded With Spam

I inadvertently set open relay on my server sometime ago. I've fixed it but I am now bombarded with spam messages. I'm seeing messages like: 6C5C41FCB3 5940 Sun Sep 24 11:10:12  bdnqkqhakis...@sfilc.com (delivery temporarily suspended: lost connection with mx-tw.mail.gm0.yahoodns.net

Re: email account bombarded with SPAM error bounces - what to do?

On 7/9/2010 16:13, Administrator Beckspaced.com wrote: On 7/9/2010 14:40, Ram wrote: On Fri, 2010-07-09 at 13:35 +0200, Administrator Beckspaced.com wrote: On 7/9/2010 13:27, Robert Schetterer wrote: Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks a

Re: email account bombarded with SPAM error bounces - what to do?

On Sat, 2010-07-10 at 14:15 +0200, Administrator Beckspaced.com wrote: On 7/9/2010 16:13, Administrator Beckspaced.com wrote: On 7/9/2010 14:40, Ram wrote: On Fri, 2010-07-09 at 13:35 +0200, Administrator Beckspaced.com wrote: On 7/9/2010 13:27, Robert Schetterer wrote: Am

Re: email account bombarded with SPAM error bounces - what to do?

Ram: I dont think is supported in a hash: file It is a special pattern for SMTPD access maps (i.e. this is implemented in the Postfix access map code, not in the code that implements hash or other databases). smtpd_null_access_lookup_key (default: ) The lookup key to be used in SMTP

Re: email account bombarded with SPAM error bounces - what to do?

On 2010-07-09 Administrator Beckspaced.com wrote: since a few weeks one of my email accounts gets bombarded with thousands of SPAM mailer daemon error bounces. could not deliver message ... bla bla bla ... it's getting really annoying as there are thousands of error bounces coming in

email account bombarded with SPAM error bounces - what to do?

hello there, i'm running a postfix 2.4.6 on a opensuse box. postfix has amawis-new with spamassasin installed ... since a few weeks one of my email accounts gets bombarded with thousands of SPAM mailer daemon error bounces. could not deliver message ... bla bla bla ... it's getting really

Re: email account bombarded with SPAM error bounces - what to do?

Am 09.07.2010 12:35, schrieb Administrator Beckspaced.com: hello there, i'm running a postfix 2.4.6 on a opensuse box. postfix has amawis-new with spamassasin installed ... since a few weeks one of my email accounts gets bombarded with thousands of SPAM mailer daemon error bounces.

Re: email account bombarded with SPAM error bounces - what to do?

hello robert, thanks a lot for your quick reply ... actually it is not always the same IP or host sending the error bounces ... the bounces are sent from hundred of different IP addresses ... any more idea? thanks for your help fun becki below some logs you requested ... change the real

RE: email account bombarded with SPAM error bounces - what to do?

From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Administrator Beckspaced.com Sent: Friday, July 09, 2010 12:52 PM To: Robert Schetterer Cc: postfix-users@postfix.org Subject: Re: email account bombarded with SPAM error bounces - what to do? hello

Re: email account bombarded with SPAM error bounces - what to do?

In an older episode (Friday, 9. July 2010), Kammen van, Marco, Springer SBM NL wrote: But there is a big spam/virus attack going on, where messages look like NDR's but they aren't. Various big anti spam vendors are having serious issues stopping this. Could you provide a URL where more

Re: email account bombarded with SPAM error bounces - what to do?

Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks a lot for your quick reply ... actually it is not always the same IP or host sending the error bounces ... the bounces are sent from hundred of different IP addresses ... any more idea? thanks for your

Re: email account bombarded with SPAM error bounces - what to do?

: email account bombarded with SPAM error bounces - what to do? hello robert, thanks a lot for your quick reply ... actually it is not always the same IP or host sending the error bounces ... the bounces are sent from hundred of different IP addresses ... any more idea? thanks for your

Re: email account bombarded with SPAM error bounces - what to do?

On 7/9/2010 13:27, Robert Schetterer wrote: Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks a lot for your quick reply ... actually it is not always the same IP or host sending the error bounces ... the bounces are sent from hundred of different IP addresses

RE: email account bombarded with SPAM error bounces - what to do?

-Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of wolfgang Sent: Friday, July 09, 2010 1:11 PM To: postfix-users@postfix.org Subject: Re: email account bombarded with SPAM error bounces - what to do? In an older episode (Friday

Re: email account bombarded with SPAM error bounces - what to do?

Am 09.07.2010 13:35, schrieb Administrator Beckspaced.com: On 7/9/2010 13:27, Robert Schetterer wrote: Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks a lot for your quick reply ... actually it is not always the same IP or host sending the error bounces

Re: email account bombarded with SPAM error bounces - what to do?

On Fri, 2010-07-09 at 13:35 +0200, Administrator Beckspaced.com wrote: On 7/9/2010 13:27, Robert Schetterer wrote: Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks a lot for your quick reply ... actually it is not always the same IP or host sending the

Re: email account bombarded with SPAM error bounces - what to do?

On 7/9/2010 14:40, Ram wrote: On Fri, 2010-07-09 at 13:35 +0200, Administrator Beckspaced.com wrote: On 7/9/2010 13:27, Robert Schetterer wrote: Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks a lot for your quick reply ... actually it is not always the

Re: email account bombarded with SPAM error bounces - what to do?

Kammen van, Marco, Springer SBM NL put forth on 7/9/2010 6:00 AM: Not sure if its related to your issue. But there is a big spam/virus attack going on, where messages look like NDR's but they aren't. Various big anti spam vendors are having serious issues stopping this. Some of my trap

Re: email account bombarded with SPAM error bounces - what to do?

Am 09.07.2010 16:13, schrieb Administrator Beckspaced.com: On 7/9/2010 14:40, Ram wrote: On Fri, 2010-07-09 at 13:35 +0200, Administrator Beckspaced.com wrote: On 7/9/2010 13:27, Robert Schetterer wrote: Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks