Does anybody have any idea why my postfix server accepted mail for the
non-existent user "<[email protected]>" (no alias by
that name either)?
Postfix accepted the mail, ran it though amavis/spamassassin, then
couldn't deliver it (nonexistent user) and generated an NDR, which
was, of course itself undeliverable, since it's in response to spam.
Anybody have any idea how this is happening?
Thanks,
Terry
------------
local_recipient_maps = unix:passwd.byname $alias_maps
alias_maps = hash:/etc/aliases
There is no user or alias named "squirrel".
Feb 2 06:54:05 wormhole postfix/smtpd[9544]: connect from
168-143-88-137-compute-ag1-ash01.opsourcecloud.net[168.143.88.137]
Feb 2 06:54:05 wormhole postfix/smtpd[9544]: 539C430134:
client=168-143-88-137-compute-ag1-ash01.opsourcecloud.net[168.143.88.137]
Feb 2 06:54:05 wormhole postfix/cleanup[9547]: 539C430134: warning:
header Subject:
=?UTF-8?Q?Crazy=20Discounts=20on=20Newest=20Wares=20from=20Roset?=?
=?UTF-8?Q?ta=20Stone=20eSpec
Feb 2 06:54:05 wormhole postfix/cleanup[9547]: 539C430134:
message-id=<20100202$5e8dbf3a$a9cb8cf$...@168-143-88-137-compute-ag1-ash01.opsourcecloud.net>
Feb 2 06:54:05 wormhole postfix/qmgr[27035]: 539C430134:
from=<[email protected]>, size=19830, nrcpt=1 (queue active)
Feb 2 06:54:05 wormhole amavis[9250]: (09250-04) LMTP::10024
/var/amavis/tmp/amavis-20100202T060238-09250:
<[email protected]> -> <[email protected]>
SIZE=19830 Receive
Feb 2 06:54:05 wormhole postfix/smtpd[9544]: disconnect from
168-143-88-137-compute-ag1-ash01.opsourcecloud.net[168.143.88.137]
Feb 2 06:54:05 wormhole amavis[9250]: (09250-04) Checking:
YZBiS18Qurwh [168.143.88.137] <[email protected]> ->
<[email protected]>
Feb 2 06:54:06 wormhole postfix/smtpd[9551]: connect from
localhost[127.0.0.1]
Feb 2 06:54:06 wormhole postfix/smtpd[9551]: BCFF83013A:
client=localhost[127.0.0.1]
Feb 2 06:54:06 wormhole postfix/cleanup[9547]: BCFF83013A:
message-id=<20100202$5e8dbf3a$a9cb8cf$...@168-143-88-137-compute-ag1-ash01.opsourcecloud.net>
Feb 2 06:54:06 wormhole postfix/smtpd[9551]: disconnect from
localhost[127.0.0.1]
Feb 2 06:54:06 wormhole postfix/qmgr[27035]: BCFF83013A:
from=<[email protected]>, size=20837, nrcpt=1 (queue active)
Feb 2 06:54:06 wormhole amavis[9250]: (09250-04) FWD via SMTP:
<[email protected]> ->
<[email protected]>,BODY=7BIT 250 2.0.0 Ok, id=09250-04,
from MTA([127.0.0.1]:1002
Feb 2 06:54:06 wormhole amavis[9250]: (09250-04) Passed SPAMMY,
[168.143.88.137] [168.143.88.137] <[email protected]> ->
<[email protected]>, Message-ID: <20100202$5e8d
Feb 2 06:54:06 wormhole postfix/lmtp[9548]: 539C430134:
to=<[email protected]>,
relay=127.0.0.1[127.0.0.1]:10024, delay=1.7, delays=0.44/0/0/1.3,
dsn=2.0.0, status=sent (250 2
Feb 2 06:54:06 wormhole postfix/qmgr[27035]: 539C430134: removed
Feb 2 06:54:06 wormhole postfix/smtp[9552]: BCFF83013A:
to=<[email protected]>, relay=none, delay=0.05,
delays=0/0/0.04/0, dsn=5.4.6, status=bounced (mail for webmail.cnysuppo
Feb 2 06:54:06 wormhole postfix/cleanup[9547]: D76193013C:
message-id=<[email protected]>
Feb 2 06:54:06 wormhole postfix/bounce[9553]: BCFF83013A: sender
non-delivery notification: D76193013C
Feb 2 06:54:06 wormhole postfix/qmgr[27035]: D76193013C: from=<>,
size=22785, nrcpt=1 (queue active)
Feb 2 06:54:06 wormhole postfix/qmgr[27035]: BCFF83013A: removed
Feb 2 06:54:37 wormhole postfix/smtp[9554]: connect to
mail.getprimestar.com[172.31.32.250]:25: Connection timed out
Feb 2 06:54:37 wormhole postfix/smtp[9554]: D76193013C:
to=<[email protected]>, relay=none, delay=30,
delays=0.07/0/30/0, dsn=4.4.1, status=deferred (connect to
mail.getprimestar.com
Feb 2 06:57:25 wormhole postfix/anvil[9545]: statistics: max
connection rate 1/60s for (smtp:168.143.88.137) at Feb 2 06:54:05
Feb 2 06:57:25 wormhole postfix/anvil[9545]: statistics: max
connection count 1 for (smtp:168.143.88.137) at Feb 2 06:54:05
