Hi gurus, Sorry if this is a little bit off topic but I´m in deep trouble. I´m running a Postfix server for a couple of domains with just a few users.
The setup is pretty secure (I think) and and don't find any evidence in my logs that I have an open relay. The problem is that I got a LOT of connections from someone that tries to send e-mail to fake users at my domain. The logfile grows at rapid speed and I got 180 MB log just for the last 12 hours. The connections are from random IP-addresses. It's different addresses and domains each time, but the pattern is the same. Example 1: Aug 27 17:54:44 www postfix/smtpd[10056]: 73D9110F26: reject: RCPT from smtp.terra.es[213.4.129.129]: 550 <[EMAIL PROTECTED]>: User unknown in virtual alias table; from=<> proto=ESMTP helo=<tsmtp8.mail.isp> Example 2: Aug 27 17:54:42 www postfix/smtpd[10069]: E2D9910F2E: reject: RCPT from host048021.arnet.net.ar[200.45.48.21]: 550 <[EMAIL PROTECTED]>: User unknown in virtual alias table; from=<> proto=ESMTP helo=<smtp-mx-02.ti.local> Any idea how to stop this. The server is behind a firewall, so I guess it´s possible to block this bastard, but I don't know how to nail him. TIA, /David ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk