Hello,
One of our client machines has got suspected as a possible spam source
simply due to the high number of messages sent from it according to the
logreport generated by our policy daemon. However, when (double)checking
the postfix log, the messages reported by the policyd could not be found
there. One example:
Sep 3 10:52:44 smtp0 postfix/smtpd[30164]: connect from client[addr]
Sep 3 10:52:44 smtp0 postfix/smtpd[30164]: 923AA88133: client=client[addr]
Sep 3 10:52:44 smtp0 postfix/smtpd[30164]: 923AA88133: reject: RCPT from
client[addr]: 450 4.1.2 <re...@domain.mistyped>:
Recipient address rejected: Domain not found; from=<cli...@email>
to=<re...@domain.mistyped> proto=ESMTP helo=<helo.name>
Sep 3 10:52:44 smtp0 postfix/smtpd[30164]: E5CD588133: client=client[addr]
Sep 3 10:52:44 smtp0 postfix/smtpd[30164]: E5CD588133: reject: RCPT from
client[addr]: 450 4.1.2 <re...@domain.mistyped>:
Recipient address rejected: Domain not found; from=<cli...@email>
to=<re...@domain.mistyped> proto=ESMTP helo=<helo.name>
Sep 3 10:52:44 smtp0 postfix/smtpd[30164]: disconnect from client[addr]
According to the postfix log, the client did not send any email
successfully at that time and there's no reference to the queue ids again.
However, from the policy daemon log, there was 46 messages processed.
This is postfix version 2.5.1. The restrictions at postfix level:
# Restrictions
smtpd_client_restrictions =
smtpd_helo_required = yes
smtpd_helo_restrictions =
smtpd_sender_restrictions =
smtpd_recipient_restrictions =
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
check_policy_service inet:127.0.0.1:10255,
permit_mynetworks,
reject_unauth_destination
The policyd can't generate log entries out of the blue - but why those
messages were not logged then by postfix?
Best regards,
Jozsef
-
E-mail : kad...@blackhole.kfki.hu, kad...@mail.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
H-1525 Budapest 114, POB. 49, Hungary
