Hello,

Noel Jones wrote:
> The above is the result of a postfix reject_unverified_recipient check. 
> The double_bounce entries you see are address probes.  In other words,
> these are not in any way related to your problem.

oook, thanks!

> Since you so far haven't shown anything remotely suspicious in your
> postfix config or logs, most likely you have some virus infected client
> machines that are sending mail direct to the recipient's MX - *not*
> relaying through your postfix.

Happy to hear this: I suspected something like that but I wasn't sure...
now I made some tests and I found a windows user with a workstation full
of trojans. I sanitized the pc. I don't know if it was the real problem
but a clean pc is better then a sick one...

> The first thing you must do is make sure that your border firewall or
> router prevents outgoing connections to destination port 25 for everyone
> except your postfix box. Then at least an infected machine can't spew
> its payload.

That was the real problem! There wasn't no rule on my firewall regarding
outbound connection towards smtp port. I fixed this and spotted on the
log some workstations using other mailservers rather then mine.

> At this point, your problem doesn't appear to be a postfix problem, nor
> something that can be addressed in postfix.

Many thanks to you all for your help.
I greatly appreciate it!

Now let's see what's gonna happen with spamcop (who tagged my IP) in
next few ours.

Thanks, again!
Ivan

-- 
Ivan Ricotti                            
-------------------------------------------     
eLabor sc - via G. Garibaldi 33, 56127 Pisa
tel: +39 050970363 web: http://www.elabor.biz
email: i...@elabor.homelinux.org
GnuPG KeyID: DFD581C5 - 13/11/2003

Reply via email to