Can someone please help me understand why I am seeing this entry over
and over in my Postfix queue? Is this dangerous or does this mean I
have been compromised?
I am seeing this over and over in my queue even after I remove it with
the "postsuper -d" command:
502E97782FC 4527 Thu May 21 16:48:04 MAILER-DAEMON
(connect to returnmail35.gowenandco.com[206.212.244.102]: Connection timed out)
info_1664177_5149789_gowenworks2-70.164.13.80_2009-5-21+tcampbell=server...@return.gowenandco.com
E386E7782A9 4527 Wed May 20 23:35:36 MAILER-DAEMON
(connect to returnmail35.manuelmedia.com[206.212.244.102]: Connection timed out)
info_1661358_5149789_reinventyourlife-99.51.80.24_2009-5-20+tcampbell=server...@return.manuelmedia.com
BCED77782A4 4534 Wed May 20 19:31:28 MAILER-DAEMON
(connect to returnmail35.manuelmedia.com[206.212.244.102]: Connection timed out)
info_1661389_5149789_reinventyourlife-99.51.80.12_2009-5-20+tcampbell=server...@return.manuelmedia.com
I assume the sender is my Postfix server (MAILER-DAEMON) & is trying
to send email that address but have no idea why? I don't think my
server is an open relay but I am adding the output of 'postfcon -n'
below:
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = amavisfeed:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = server.us
myhostname = mail.server.us
mynetworks = $config_directory/mynetworks
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
relay_domains =
sample_directory = /usr/share/doc/postfix-2.3.3/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,
reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname,
permit
smtpd_recipient_restrictions = reject_unauth_pipelining,
reject_non_fqdn_recipient, reject_unknown_recipient_domain,
permit_mynetworks, reject_unauth_destination, check_sender_access
hash:/etc/postfix/sender_access, reject_rbl_client
zen.spamhaus.org, reject_rbl_client bl.spamcop.net,
check_policy_service unix:postgrey/socket, permit
smtpd_sender_restrictions = permit_mynetworks,
reject_non_fqdn_sender, reject_unknown_sender_domain, permit
unknown_local_recipient_reject_code = 550
