hello, thanks for rispota. You please be more specific? logs to check are / var / log / mailllog right?
how do I check if SMTP AUTH is active? how do I check the ip who sent this email spam? thanks 2012/5/9 Bill Weiss <houdini+post...@clanspum.net>: > Giuseppe Perna(gpe...@csait.eu)@Tue, May 08, 2012 at 11:10:15PM +0200: >> hy, >> i have an old version of postfix. >> i have this problem: from my server with sender freelo...@hotmail.com >> leave hundreds of spam messages to the Internet, I analyzed the file / >> var / log / maillog and I see this: >> BE80AB81E65 3272 Tue May 8 08:18:41 freelo...@hotmail.com >> (host smart-relay.mail.pippo.it[210.91.5.137] said: 451 DNS temporary >> error. (in reply to RCPT TO command)) >> g...@m2.lvlfe.com >> gogrant...@mn.rr.com >> gore...@mn.rr.com >> goverl...@mn.rr.com >> gpinv...@mstarmetro.net >> >> how can I check who is the real user who generates envi spam? > > Look in your server logs for BE80AB81E65 and see who sent. Hopefully you > have SMTP AUTH turned on, otherwise you'll just get a source IP to track > down. > > -- > Bill Weiss