>Damian, > >Please ignore the above bad advice. An OK in >smtpd_sender_restrictions can not possibly make you an open >relay. Likely it didn't work as expected because the mail >isn's submitted via SMTP.
>Before you waste time on any other bad advice you may get, >examine your logs to see where the mail comes from. Once you >know the problem, a solution is much easier. >Post logs here if you don't know how to evaluate them. >My wild guess is that you have an abused web form, but check >the logs before you go running around telling everyone your >web server is hacked. > > > -- Noel Jones > Thanks to everyone for your quick answers. Noel, it's not my web server the problem, or I guess it isn't, it's my outgoing mail server that has the problem and it is because I'm not finding a way to properly check my valid senders. In an inconming mail relay built on Postfix you can build a list of valid recipients and reject the invalid ones. Isn't there a similar option to validate senders? And, is there a way validate if that sender has come out from my network? I was thinking in those two things to stop this. Anyway, I'm posting some logs from the mailqueue: ---- Jan 11 16:42:43 impcht3 postfix/qmgr[29558]: DC2C94D86B: from=<t...@963.net>, size=6006, nrcpt=1 (queue active) Jan 11 16:42:43 impcht3 postfix/error[29904]: D1CD350F60: to=<southernprincess_...@yahoo.com>, relay=none, delay=220465, delays=220453/0.64/0/12, dsn=4.7.0, status=deferred (delivery temporarily suspended: host e.mx.mail.yahoo.com[67.195.168.230] refused to talk to me: 421 4.7.0 [TS01] Messages from 200.55.14.253 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html) Jan 11 16:42:43 impcht3 postfix/error[30919]: DCEFB46E53: to=<mohammedv...@yahoo.com>, relay=none, delay=229978, delays=229976/0.78/0/0.41, dsn=4.7.0, status=deferred (delivery temporarily suspended: host e.mx.mail.yahoo.com[67.195.168.230] refused to talk to me: 421 4.7.0 [TS01] Messages from 200.55.14.253 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html) Jan 11 16:42:43 impcht3 postfix/error[30949]: D472A47F38: to=<sanju_sudha...@yahoo.com>, relay=none, delay=225147, delays=225138/2.5/0/6.3, dsn=4.7.0, status=deferred (delivery temporarily suspended: host e.mx.mail.yahoo.com[67.195.168.230] refused to talk to me: 421 4.7.0 [TS01] Messages from 200.55.14.253 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html) Jan 11 16:42:43 impcht3 postfix/error[30976]: D9875481D6: to=<t...@963.net>, relay=none, delay=205984, delays=205980/3.5/0/0.49, dsn=4.0.0, status=deferred (delivery temporarily suspended: host msg.963.net[202.96.154.167] refused to talk to me: 554 IP is rejected: 188.) Jan 11 16:42:43 impcht3 postfix/smtp[29668]: D89044B978: host hrndva-smtpin01.mail.rr.com[71.74.56.243] refused to talk to me: 554 5.7.1 - ERROR: Mail refused - <200.55.14.253> - See http://security.rr.com/cgi-bin/block-lookup?200.55.14.253 Jan 11 16:42:43 impcht3 postfix/error[30941]: D73DF58B14: to=<t...@963.net>, relay=none, delay=165707, delays=165706/0.17/0/0.47, dsn=4.0.0, status=deferred (delivery temporarily suspended: host msg.963.net[202.96.154.167] refused to talk to me: 554 IP is rejected: 188.) ---- As you can see, Yahoo and some others have already blocked my IP and that mail address t...@963.net has filled up my mail queue not only with mails sent but also with bounces. Just ask if you want to know anything else. Regards, Damian
