Re: [spamdyke-users] MAILER-DAEMON Flood

[Gary Gendel via spamdyke-users]

This doesn't look like it's email originating from your system. Instead, it looks like spamdyke has accepted the message and then qmail is doing the rejection. My guess is that it passes through spamdyke with an invalid destination user. Qmail then tries to reject it.

Gary

On 11/07/2016 10:59 AM, BC via spamdyke-users wrote:

You can avoid this by adding invalid user checks in spamdyke so it doesn't reach qmail by setting "recipient-validation-command=<program>" (I use spamdyke-qrv) and "reject-recipient=invalid".

They look like this:

----------------

Hi. This is the qmail-send program at purgatoire.org.


<lvadvc...@telcom.es>:
212.4.107.202 does not like recipient.

Giving up on 212.4.107.202.

--- Below this line is the original bounce.

----------------






Is someone somehow using my system to try to send spam?

Any idea how to block this?

_______________________________________________
spamdyke-users mailing list
spamdyke-users@spamdyke.org
http://www.spamdyke.org/mailman/listinfo/spamdyke-users

It hasn't risen to the level of DDOS, yet, but I'm getting many hundreds of these messages per night (and it is now continuing during the day). I tried to deliver a bounce message to this address, but the bounce bounced! Remote host said: 550 5.1.1<lvadvc...@telcom.es>: Recipient address rejected: telcom.es ... each one with totally unrelated email and IP addresses and with variable sizes and all in MIME format. I use FreeBSD here. Running qmail in a jail. I do use ssmtp running on the host (not jailed) in order to get the periodic daily/weekly/monthly reports.

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
spamdyke-users mailing list
spamdyke-users@spamdyke.org
http://www.spamdyke.org/mailman/listinfo/spamdyke-users