Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-11 Thread Jeroen Geilman
On 09/07/2013 05:19 AM, FliedRice wrote: Just a thought, In order to block more incoming spam you could add more rbl's to your main.cf file. I have spamassassin, but it's turned off in favor of the following smtpd restrictions and domain blocking in the plesk user interface, or filtering in the C

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread FliedRice
for Birthdays, Christmas , holidays, Valentines , Love , & just because! -- View this message in context: http://postfix.1071664.n5.nabble.com/spam-headers-from-ME-to-ME-but-different-anvelope-sender-tp61232p61250.html Sent from the Postfix Users mailing list archive at Nabble.com.

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Stan Hoeppner
On 9/6/2013 9:05 AM, Wietse Venema wrote: > Wijatmoko U. Prayitno: >> On Fri, 06 Sep 2013 16:43:27 +0300 >> wiseadmin wrote: >> >>> and the same message from postfix logs: >>> >>> /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: >>> uid=1018 from= >> The email came from

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
All emails are reveived through smtp and then they are passed to spamd, inspected and delivered. If I say something stupid, please excuse me, I am experienced with linux and networking in general bun not to postfix and email servers. I sent an email to myself and

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Wijatmoko U. Prayitno
On Fri, 6 Sep 2013 10:05:49 -0400 (EDT) wie...@porcupine.org (Wietse Venema) wrote: >>> /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: >>> uid=1018 from= >> The email came from local user uid 1018 (service pickup). > > Good observation. This message did not come via

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
I installed SA last week and I started to reveive these spams 1-2 months ago. # netstat -tupan | grep spam tcp0 0 127.0.0.1:783 0.0.0.0:* LISTEN 27752/spamd.pid What tests should I do next? This is a production server, I'am starting to become afraid. What was t

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Tonu Samuel
On Fri, 2013-09-06 at 21:10 +0700, Wijatmoko U. Prayitno wrote: > On Fri, 6 Sep 2013 10:05:49 -0400 (EDT) > wie...@porcupine.org (Wietse Venema) wrote: > > >>> /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: > >>> A3E8C10BADF: uid=1018 from= > >> The email came from local user uid

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Wietse Venema
Wijatmoko U. Prayitno: > On Fri, 06 Sep 2013 16:43:27 +0300 > wiseadmin wrote: > > > and the same message from postfix logs: > > > > /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: > > uid=1018 from= > The email came from local user uid 1018 (service pickup). Good o

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
Ok, this is a solution. I tried to avoid this because it consumes some resources. I have problems ONLY with this specific spam. I try to find out if there is something like this: - reject all emails that come from a different server to my server and have the From: header a local address (on my

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
And what does it mean? uid 1018 is the user under witch spamd runs. #grep 1018 /etc/passwd spamd:x:1018:1019::/home/spamd:/bin/bash I don't know how to interpret the fact that is comes from pickup service. Is my server compromised? Thanks. On 09/06/2013 04:51 PM, Wijatmoko U. Prayitno wrote

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Wijatmoko U. Prayitno
On Fri, 06 Sep 2013 16:43:27 +0300 wiseadmin wrote: > and the same message from postfix logs: > > /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: > uid=1018 from= The email came from local user uid 1018 (service pickup). -- WUP

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Wietse Venema
wiseadmin: > I have a postfix server for > many years. The anti-spam filters were ok, I got in general just a > couple of spams per day. > > Since a month or so, I start getting > more than 100 spams for every user on a specific account/domain > per >

spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
Hello, I have a postfix server for many years. The anti-spam filters were ok, I got in general just a couple of spams per day. Since a month or so, I start getting more than 100 spams for every user on a specific account/domain per da