Hi Terry,
Thank you for your reply.
It's not full log just only grepped by pattern and it's just only one
example:
Jun 19 02:32:47 smtp66 gld: Greylist activated for
recipient=<|arl.b...@domain_name.com> sender=<|arl.b...@domain_name.com>
ip=<201.62.213.153>
Jun 19 02:32:47 smtp66 postfix/smtpd[5721]: NOQUEUE: reject: RCPT from
bca201062213153.res-com.wayinternet.com.br[201.62.213.153]: 450 4.7.1
<|arl.b...@domain_name.com>: Recipient address rejected: Greylisting in
action, please try later ; from=<|arl.b...@domain_name.com>
to=<|arl.b...@domain_name.com> proto=ESMTP
helo=<bca201062213153.res-com.wayinternet.com.br>
Jun 19 03:12:35 smtp66 postfix/smtpd[13327]: NOQUEUE: reject: RCPT from
unknown[222.114.87.100]: 450 4.7.1 Client host rejected: cannot find
your reverse hostname, [222.114.87.100];
from=<|arl.b...@domain_name.com> to=<|arl.b...@domain_name.com>
proto=ESMTP helo=<[222.114.87.100]>
Jun 19 04:32:44 smtp66 gld: Greylist activated for
recipient=<|arl.b...@domain_name.com> sender=<|arl.b...@domain_name.com>
ip=<201.82.219.32>
Jun 19 04:32:44 smtp66 postfix/smtpd[27760]: NOQUEUE: reject: RCPT from
unknown[201.82.219.32]: 450 4.7.1 <|arl.b...@domain_name.com>: Recipient
address rejected: Greylisting in action, please try later ;
from=<|arl.b...@domain_name.com> to=<|arl.b...@domain_name.com>
proto=ESMTP helo=<c952db20.virtua.com.br>
Jun 19 04:53:51 smtp66 postfix/smtpd[6009]: NOQUEUE: reject: RCPT from
unknown[116.39.15.133]: 450 4.7.1 Client host rejected: cannot find your
reverse hostname, [116.39.15.133]; from=<|arl.b...@domain_name.com>
to=<|arl.b...@domain_name.com> proto=ESMTP helo=<[116.39.15.133]>
Jun 19 05:35:19 smtp66 postfix/smtpd[17787]: NOQUEUE: reject: RCPT from
unknown[60.243.38.239]: 450 4.7.1 Client host rejected: cannot find your
reverse hostname, [60.243.38.239]; from=<|arl.b...@domain_name.com>
to=<|arl.b...@domain_name.com> proto=ESMTP helo=<[60.243.38.239]>
Jun 19 06:09:04 smtp66 postfix/smtpd[22006]: NOQUEUE: reject: RCPT from
unknown[220.70.211.81]: 450 4.7.1 Client host rejected: cannot find your
reverse hostname, [220.70.211.81]; from=<|arl.b...@domain_name.com>
to=<|arl.b...@domain_name.com> proto=ESMTP helo=<[220.70.211.81]>
Jun 19 08:22:19 smtp66 gld: Greylist activated for
recipient=<|arl.b...@domain_name.com> sender=<|arl.b...@domain_name.com>
ip=<88.245.200.195>
Jun 19 08:22:19 smtp66 postfix/smtpd[15376]: NOQUEUE: reject: RCPT from
unknown[88.245.200.195]: 450 4.7.1 <|arl.b...@domain_name.com>:
Recipient address rejected: Greylisting in action, please try later ;
from=<|arl.b...@domain_name.com> to=<|arl.b...@domain_name.com>
proto=ESMTP helo=<dsl88.245-51143.ttnet.net.tr>
Jun 19 11:17:25 smtp66 gld: Greylist activated for
recipient=<|arl.b...@domain_name.com> sender=<|arl.b...@domain_name.com>
ip=<77.114.152.106>
Jun 19 11:17:25 smtp66 postfix/smtpd[7566]: NOQUEUE: reject: RCPT from
apn-77-114-152-106.dynamic.gprs.plus.pl[77.114.152.106]: 450 4.7.1
<|arl.b...@domain_name.com>: Recipient address rejected: Greylisting in
action, please try later ; from=<|arl.b...@domain_name.com>
to=<|arl.b...@domain_name.com> proto=ESMTP
helo=<apn-77-114-152-106.dynamic.gprs.plus.pl>
Jun 19 12:14:48 smtp66 gld: Greylist activated for
recipient=<|arl.b...@domain_name.com> sender=<|arl.b...@domain_name.com>
ip=<122.161.10.253>
Jun 19 12:14:48 smtp66 postfix/smtpd[17821]: NOQUEUE: reject: RCPT from
unknown[122.161.10.253]: 450 4.7.1 <|arl.b...@domain_name.com>:
Recipient address rejected: Greylisting in action, please try later ;
from=<|arl.b...@domain_name.com> to=<|arl.b...@domain_name.com>
proto=ESMTP helo=<ABTS-North-Dynamic-253.10.161.122.airtelbroadband.in>
Jun 19 13:33:47 smtp66 gld: Greylist activated for
recipient=<|arl.b...@domain_name.com> sender=<|arl.b...@domain_name.com>
ip=<189.73.88.106>
Jun 19 13:33:47 smtp66 postfix/smtpd[27887]: NOQUEUE: reject: RCPT from
unknown[189.73.88.106]: 450 4.7.1 <|arl.b...@domain_name.com>: Recipient
address rejected: Greylisting in action, please try later ;
from=<|arl.b...@domain_name.com> to=<|arl.b...@domain_name.com>
proto=ESMTP helo=<189-73-88-106.e.ccoce700.brasiltelecom.net.br>
Jun 19 14:07:41 smtp66 gld: Greylist activated for
recipient=<|arl.b...@domain_name.com> sender=<|arl.b...@domain_name.com>
ip=<62.177.85.63>
Jun 19 14:07:41 smtp66 postfix/smtpd[32219]: NOQUEUE: reject: RCPT from
ost1-v-4-63.static.adsl.vol.cz[62.177.85.63]: 450 4.7.1
<|arl.b...@domain_name.com>: Recipient address rejected: Greylisting in
action, please try later ; from=<|arl.b...@domain_name.com>
to=<|arl.b...@domain_name.com> proto=ESMTP
helo=<ost1-v-4-63.static.adsl.vol.cz>
Jun 19 14:14:45 smtp66 postfix/cleanup[8046]: CEC657112BF2: hold: header
Received: from ost1-v-4-63.static.adsl.vol.cz
(ost1-v-4-63.static.adsl.vol.cz [62.177.85.63])??by
smtp66.swiftinter.net (Postfix) with ESMTP id CEC657112BF2??for
<|arl.b...@domain_name.com>; Fri, 19 from
ost1-v-4-63.static.adsl.vol.cz[62.177.85.63];
from=<|arl.b...@domain_name.com> to=<|arl.b...@domain_name.com>
proto=ESMTP helo=<ost1-v-4-63.static.adsl.vol.cz>
Jun 19 14:14:53 smtp66 MailScanner[32171]: Message CEC657112BF2.A431C
from 0.0.0.0 (|arl.b...@domain_name.com) to domain_name.com is spam,
SpamAssassin (not cached, score=12.905, required 3, BAYES_99 3.50,
HELO_DYNAMIC_HCC 4.29, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,
RCVD_IN_SORBS_WEB 0.62, RCVD_IN_XBL 3.03)
Jun 19 14:14:54 smtp66 MailScanner[32171]: Non-delivery of spam: message
CEC657112BF2.A431C from |arl.b...@domain_name.com to
|arl.b...@domain_name.com with subject Contact us to confirm order
Of course domain_name.com is a domain name allowed to relay on this server.
I want to stop everything what starts from pipe "|".
Regards,
Jarek
Terry Carmen wrote:
Hi.
As I'm new on that group I would like to welcome everyone.
I've noticed that in my SMTP filtering server a lot of spam try to get
through. I want to block it but the problem is all these emails starts
from | (pipe). How to block it then ?
I've tried to add /^From: |(*)/ REJECT in access file but it doesn't work.
Can somebody shed a light for me how to block it ?
Post some log entires showing the unwanted mail entering your system.
Terry
