Autor Téma: Postfix HELP spam ?  (Přečteno 2920 krát)

Offline branec

  • Začátečník
  • **
  • Příspěvků: 39
    • Zobrazit profil
Postfix HELP spam ?
« kdy: 16. 05. 2011, 02:39:59 »
Ahojte nedávno som si všimol že moj server je nejako moc vytežený a hlavne HDD stále pracuje, hľadal som hľadal a v logu postfixu som si všimol divné veci ukážem názorny log

Kód: [Vybrat]
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<dave01shirt@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<dave0527ky@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<dave06261981@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<dave25mp@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<dave44512@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<dave4pollack@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<dave697173@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<dave71483@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<dave74x@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<dave8rust@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<davea412004@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<daveabrandon@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<daveamaze@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<daveand664@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<daveandamy123@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:36:21 no-ip postfix/smtp[2088]: 622A0700A17: to=<daveandces@yahoo.com>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=18, delays=10/0.01/0.56/7, dsn=2.0.0, status=sent (250 ok dirdel 17/0)
May 16 02:39:17 no-ip postfix/smtp[2067]: 8D524700A56: to=<debbie.noto@corp.idt.net>, relay=corp.idt.net.mail5.psmtp.com[64.18.5.10]:25, delay=13, delays=11/0.01/2.1/0.35, dsn=5.0.0, status=bounced (host corp.idt.net.mail5.psmtp.com[64.18.5.10] said: 550 No such user - psmtp (in reply to RCPT TO command))
May 16 02:39:17 no-ip postfix/smtp[2069]: certificate verification failed for mail.nantucket.net[66.240.210.88]:25: self-signed certificate
May 16 02:39:17 no-ip postfix/smtp[2104]: 8D524700A56: to=<debbie.conley@swcs.us>, relay=MEC.MX.ESU.k12.oh.us[208.108.11.227]:25, delay=13, delays=11/0.01/1.9/0.78, dsn=2.0.0, status=sent (250 ok:  Message 445904899 accepted)
May 16 02:39:17 no-ip postfix/smtp[2077]: 8D524700A56: to=<debbernson@wi.rr.com>, relay=hrndva-smtpin01.mail.rr.com[71.74.56.243]:25, delay=13, delays=11/0.01/2.5/0.28, dsn=5.1.1, status=bounced (host hrndva-smtpin01.mail.rr.com[71.74.56.243] said: 550 5.1.1 - Invalid mailbox: debbernson@wi.rr.com (in reply to RCPT TO command))
May 16 02:39:17 no-ip postfix/smtp[2107]: 8D524700A56: to=<debbie.montgomery@smithsdetection.com>, relay=cluster1.us.messagelabs.com[216.82.249.3]:25, delay=13, delays=11/0.01/2.2/0.53, dsn=5.0.0, status=bounced (host cluster1.us.messagelabs.com[216.82.249.3] said: 553-Message filtered. Please see the FAQs section on spam 553-at http://www.messagelabs.com/support/ for more 553 information. (#5.7.1) (in reply to end of DATA command))
May 16 02:39:17 no-ip postfix/smtp[2059]: 8D524700A56: to=<debbie.lake@cardinal.com>, relay=smtp4.cardinal.com[198.89.160.68]:25, delay=13, delays=11/0.01/1.9/0.89, dsn=2.0.0, status=sent (250 ok:  Message 63556198 accepted)
May 16 02:39:17 no-ip postfix/smtp[2078]: BD12D700A64: to=<security_notification@bankofamerica.com>, relay=txemail2.bankofamerica.com[171.161.161.178]:25, delay=2, delays=0/0/1.7/0.31, dsn=5.1.1, status=bounced (host txemail2.bankofamerica.com[171.161.161.178] said: 550 5.1.1 <security_notification@bankofamerica.com>... User unknown (in reply to RCPT TO command))
May 16 02:39:17 no-ip postfix/smtp[2017]: 8D524700A56: to=<debbie.carmellas@adelphia.net>, relay=cdptpa-smtpin01.mail.rr.com[75.180.132.243]:25, delay=13, delays=11/0.01/2.5/0.32, dsn=5.1.1, status=bounced (host cdptpa-smtpin01.mail.rr.com[75.180.132.243] said: 550 5.1.1 - Invalid mailbox: debbie.carmellas@adelphia.net (in reply to RCPT TO command))
May 16 02:39:17 no-ip postfix/smtp[2061]: 8D524700A56: to=<debbie.jones@delmarva.com>, relay=mx1.pepcoholdings.com.gslb.pphosted.com[67.231.152.26]:25, delay=13, delays=11/0.01/2.7/0.14, dsn=5.1.1, status=bounced (host mx1.pepcoholdings.com.gslb.pphosted.com[67.231.152.26] said: 550 5.1.1 User Unknown (in reply to DATA command))
May 16 02:39:17 no-ip postfix/smtp[2025]: 0DA6E700A5C: to=<deannac@ccsww.org>, relay=mx522.us.emailfiltering.com[208.87.137.137]:25, delay=17, delays=11/0.01/5.6/0.37, dsn=4.0.0, status=deferred (host mx522.us.emailfiltering.com[208.87.137.137] said: 421 <deannac@ccsww.org>: Deferring connection (in reply to RCPT TO command))
May 16 02:39:17 no-ip postfix/qmgr[1828]: BD12D700A64: removed

A toto tam beha stále len ine adresy iné IP a podobne a neviem určit alebo skôr vydedukovať s toho čo to je .....

EDIT >> o môj bože v postfixe v Mail Queue som našiel 973 messages ach jaj takže asi spam na moj email server alebo ako to povedať...
« Poslední změna: 16. 05. 2011, 02:54:39 od branec »