Does anybody have any idea why my postfix server accepted mail for the
non-existent user "<squir...@webmail.cnysupport.com>" (no alias by
that name either)?
Postfix accepted the mail, ran it though amavis/spamassassin, then
couldn't deliver it (nonexistent user) and generated an NDR, which
was, of course itself undeliverable, since it's in response to spam.
Anybody have any idea how this is happening?
Thanks,
Terry
------------
local_recipient_maps = unix:passwd.byname $alias_maps
alias_maps = hash:/etc/aliases
There is no user or alias named "squirrel".
Feb 2 06:54:05 wormhole postfix/smtpd[9544]: connect from
168-143-88-137-compute-ag1-ash01.opsourcecloud.net[168.143.88.137]
Feb 2 06:54:05 wormhole postfix/smtpd[9544]: 539C430134:
client=168-143-88-137-compute-ag1-ash01.opsourcecloud.net[168.143.88.137]
Feb 2 06:54:05 wormhole postfix/cleanup[9547]: 539C430134: warning:
header Subject:
=?UTF-8?Q?Crazy=20Discounts=20on=20Newest=20Wares=20from=20Roset?=?
=?UTF-8?Q?ta=20Stone=20eSpec
Feb 2 06:54:05 wormhole postfix/cleanup[9547]: 539C430134:
message-id=<20100202$5e8dbf3a$a9cb8cf$...@168-143-88-137-compute-ag1-ash01.opsourcecloud.net>
Feb 2 06:54:05 wormhole postfix/qmgr[27035]: 539C430134:
from=<memb...@getprimestar.com>, size=19830, nrcpt=1 (queue active)
Feb 2 06:54:05 wormhole amavis[9250]: (09250-04) LMTP::10024
/var/amavis/tmp/amavis-20100202T060238-09250:
<memb...@getprimestar.com> -> <squir...@webmail.cnysupport.com>
SIZE=19830 Receive
Feb 2 06:54:05 wormhole postfix/smtpd[9544]: disconnect from
168-143-88-137-compute-ag1-ash01.opsourcecloud.net[168.143.88.137]
Feb 2 06:54:05 wormhole amavis[9250]: (09250-04) Checking:
YZBiS18Qurwh [168.143.88.137] <memb...@getprimestar.com> ->
<squir...@webmail.cnysupport.com>
Feb 2 06:54:06 wormhole postfix/smtpd[9551]: connect from
localhost[127.0.0.1]
Feb 2 06:54:06 wormhole postfix/smtpd[9551]: BCFF83013A:
client=localhost[127.0.0.1]
Feb 2 06:54:06 wormhole postfix/cleanup[9547]: BCFF83013A:
message-id=<20100202$5e8dbf3a$a9cb8cf$...@168-143-88-137-compute-ag1-ash01.opsourcecloud.net>
Feb 2 06:54:06 wormhole postfix/smtpd[9551]: disconnect from
localhost[127.0.0.1]
Feb 2 06:54:06 wormhole postfix/qmgr[27035]: BCFF83013A:
from=<memb...@getprimestar.com>, size=20837, nrcpt=1 (queue active)
Feb 2 06:54:06 wormhole amavis[9250]: (09250-04) FWD via SMTP:
<memb...@getprimestar.com> ->
<squir...@webmail.cnysupport.com>,BODY=7BIT 250 2.0.0 Ok, id=09250-04,
from MTA([127.0.0.1]:1002
Feb 2 06:54:06 wormhole amavis[9250]: (09250-04) Passed SPAMMY,
[168.143.88.137] [168.143.88.137] <memb...@getprimestar.com> ->
<squir...@webmail.cnysupport.com>, Message-ID: <20100202$5e8d
Feb 2 06:54:06 wormhole postfix/lmtp[9548]: 539C430134:
to=<squir...@webmail.cnysupport.com>,
relay=127.0.0.1[127.0.0.1]:10024, delay=1.7, delays=0.44/0/0/1.3,
dsn=2.0.0, status=sent (250 2
Feb 2 06:54:06 wormhole postfix/qmgr[27035]: 539C430134: removed
Feb 2 06:54:06 wormhole postfix/smtp[9552]: BCFF83013A:
to=<squir...@webmail.cnysupport.com>, relay=none, delay=0.05,
delays=0/0/0.04/0, dsn=5.4.6, status=bounced (mail for webmail.cnysuppo
Feb 2 06:54:06 wormhole postfix/cleanup[9547]: D76193013C:
message-id=<20100202115406.d761930...@smtp.cnysupport.com>
Feb 2 06:54:06 wormhole postfix/bounce[9553]: BCFF83013A: sender
non-delivery notification: D76193013C
Feb 2 06:54:06 wormhole postfix/qmgr[27035]: D76193013C: from=<>,
size=22785, nrcpt=1 (queue active)
Feb 2 06:54:06 wormhole postfix/qmgr[27035]: BCFF83013A: removed
Feb 2 06:54:37 wormhole postfix/smtp[9554]: connect to
mail.getprimestar.com[172.31.32.250]:25: Connection timed out
Feb 2 06:54:37 wormhole postfix/smtp[9554]: D76193013C:
to=<memb...@getprimestar.com>, relay=none, delay=30,
delays=0.07/0/30/0, dsn=4.4.1, status=deferred (connect to
mail.getprimestar.com
Feb 2 06:57:25 wormhole postfix/anvil[9545]: statistics: max
connection rate 1/60s for (smtp:168.143.88.137) at Feb 2 06:54:05
Feb 2 06:57:25 wormhole postfix/anvil[9545]: statistics: max
connection count 1 for (smtp:168.143.88.137) at Feb 2 06:54:05
