On Mon, Oct 20, 2008 at 6:41 PM, Neil <[EMAIL PROTECTED]> wrote:

>
> On 20 Oct 2008, at 18:39, Linux Addict wrote:
>
>
>
> On Mon, Oct 20, 2008 at 6:33 PM, Neil <[EMAIL PROTECTED]> wrote:
>
>> On 20 Oct 2008, at 18:24, Linux Addict wrote:
>>
>> Hi, Looks like our MX servers are hit hard by a specific email address
>> which is sending frequent mails trying to use our relay effectively many
>> mail servers seems to be blacklisting.
>>
>> Oct 20 18:20:05 mx01 postfix/qmgr[6512]: DBB784BE68E: from=<
>> [EMAIL PROTECTED]>, size=3309, nrcpt=1 (queue active)
>> Oct 20 18:20:05 mx0  postfix/error[9345]: DA960E73E11: to=<
>> [EMAIL PROTECTED]>, relay=none, delay=77080,
>> delays=76950/130/0/0.01, dsn=4.4.1, status=deferred (delivery temporarily
>> suspended: connect to exchange.net Connection timed out)
>>
>> Please help me stop this. Thank you!
>>
>> ~LA
>>
>>
>> Unless I'm mistaken (and I'm not the most knowledgeable person on this
>> list), I think your server thinks it's okay to accept mail for the domain "
>> exchange.net" (and I'm assuming "exchange.net" isn't yours).  So to fix
>> this, you need to tell postfix only to accept mail for your domains.  I
>> think you should check my_destination, relay_domains, etc.
>>
>> Post the output of "postconf -n".
>>
>> -N.
>>
>
>
> Thanks for your reply.
>
>
> mydestination = $myhostname
> relay_domains = $mydestination
>
> Actually its not just exchange.net, most of the mails are being sent to
> bellsouth.net
>
> Oct 20 18:37:27 mx01 postfix/qmgr[6597]: 5CE74D08FE1: from=<
> [EMAIL PROTECTED]>, size=3237, nrcpt=1 (queue active)
> Oct 20 18:37:27 mx01 postfix/error[6838]: 57AD01031088: to=<
> [EMAIL PROTECTED]>, relay=none, delay=14928, delays=14928/0.05/0/0,
> dsn=4.0.0, status=deferred (delivery temporarily suspended: host
> gateway-f2.isp.att.net[207.115.11.16] refused to talk to me: 450 too
> frequent connects from 63.240.86.13, please try again later.)
>
>
> Thanks
> LA
>
>
> I don't think you need $mydestination in relay_domains.  And the rest of
> postconf -n would still be useful.
>



alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 50
disable_vrfy_command = yes
fallback_transport = maildrop
header_checks = regexp:/etc/postfix/header_checks
home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
local_recipient_maps = proxy:unix:passwd.byname $virtual_alias_maps
$alias_maps
mail_owner = postfix
mail_spool_directory = /var/spool/mail
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
mydestination = $myhostname
mydomain = example.net
myhostname = mx02.example.net
mynetworks = /etc/postfix/network_table
mynetworks_style = class
myorigin = $myhostname
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
relay_domains = $mydestination
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,     reject_non_fqdn_hostname,
  reject_invalid_hostname,     permit
smtpd_recipient_limit = 300
smtpd_recipient_restrictions = permit_mynetworks,
 permit_sasl_authenticated,    reject_unauth_destination,
 reject_invalid_hostname,    reject_unauth_pipelining,
 reject_non_fqdn_sender,    reject_unknown_sender_domain,
 reject_non_fqdn_recipient,    reject_unknown_recipient_domain,
 reject_rbl_client blackholes.easynet.nl,    reject_rbl_client
cbl.abuseat.org,    reject_rbl_client proxies.blackholes.wirehub.net,
 reject_rbl_client bl.spamcop.net,    reject_rbl_client sbl.spamhaus.org,
 reject_rbl_client dnsbl.njabl.org,    reject_rbl_client list.dsbl.org,
 reject_rbl_client multihop.dsbl.org,    permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /usr/share/ssl/certs/cacert.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /usr/share/ssl/certs/cert.pem
smtpd_tls_key_file = /usr/share/ssl/certs/key.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_exchange_name = /var/lib/postfix/prng_exch
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_maps = hash:/etc/postfix/maps/pf_aliases
virtual_gid_maps = static:102
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = hash:/etc/postfix/maps/pf_domain
virtual_mailbox_limit = 51200000
virtual_mailbox_maps = hash:/etc/postfix/maps/pf_domain_mailboxes
virtual_minimum_uid = 102
virtual_transport = maildrop
virtual_uid_maps = static:102

Reply via email to