* Ivan Ricotti <i.rico...@elabor.homelinux.org>:
> smtpd_recipient_restrictions =
> reject_invalid_hostname,
> reject_non_fqdn_sender,
> reject_non_fqdn_recipient,
> reject_unknown_sender_domain,
> reject_unknown_recipient_domain,
> reject_unauth_pipelining,
> permit_mynetworks,
> reject_unauth_destination,
> reject_rbl_client bl.spamcop.net,
> reject_rbl_client cbl.abuseat.org,
> reject_rbl_client sbl.spamhaus.org,
> permit
reject_rbl_client cbl.abuseat.org,
reject_rbl_client sbl.spamhaus.org,
can be merged into:
reject_rbl_client zen.spanhaus.org
> Now in my /var/log/mail.info I have a lot of lines like this:
>
> Mar 25 11:35:10 athene postfix/smtpd[24933]: NOQUEUE: reject: RCPT from
> unknown[92.101.112.32]: 554 5.7.1 Service unavailable; Client host
> [92.101.112.32] blocked using bl.spamcop.net; Blocked - see
> http://www.spamcop.net/bl.shtml?92.101.112.32;
> from=<janicetyson.4...@aol.com> to=<giova...@elabor.homelinux.org>
> proto=SMTP helo=<ip-032-112-101-92.pools.atnet.ru>
>
> Good! I thougth, then I read this help on the postfix documentation page:
>
> What is backscatter mail?
>
> When a spammer or worm sends mail with forged sender addresses,
> innocent sites are flooded with undeliverable mail notifications. This
> is called backscatter mail. With Postfix, you know that you're a
> backscatter victim when your logfile goes on and on like this:
>
> Dec 4 04:30:09 hostname postfix/smtpd[58549]: NOQUEUE: reject:
> RCPT from xxxxxxx[x.x.x.x]: 550 5.1.1 <yyy...@your.domain.here>:
> Recipient address rejected: User unknown; from=<>
> to=<yyy...@your.domain.here> proto=ESMTP helo=<zzzzzz>
>
> What you see are lots of "user unknown" errors with "from=<>". These
> are error reports from MAILER-DAEMONs elsewhere on the Internet.
>
> -------------------
>
> Now I fear to be source of backscatter emails. Is that my case?
No.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
I have never seen anything fill up a vacuum so fast and still suck.
-- Rob Pike, commenting on the X Window System.
