Am 09.05.2012 09:01, schrieb Giuseppe Perna: > hello, thanks for rispota. > You please be more specific? > logs to check are / var / log / mailllog right? > > how do I check if SMTP AUTH is active? > how do I check the ip who sent this email spam? > thanks > > > > > 2012/5/9 Bill Weiss <houdini+post...@clanspum.net>: >> Giuseppe Perna(gpe...@csait.eu)@Tue, May 08, 2012 at 11:10:15PM +0200: >>> hy, >>> i have an old version of postfix. >>> i have this problem: from my server with sender freelo...@hotmail.com >>> leave hundreds of spam messages to the Internet, I analyzed the file / >>> var / log / maillog and I see this: >>> BE80AB81E65 3272 Tue May 8 08:18:41 freelo...@hotmail.com >>> (host smart-relay.mail.pippo.it[210.91.5.137] said: 451 DNS temporary >>> error. (in reply to RCPT TO command)) >>> g...@m2.lvlfe.com >>> gogrant...@mn.rr.com >>> gore...@mn.rr.com >>> goverl...@mn.rr.com >>> gpinv...@mstarmetro.net >>> >>> how can I check who is the real user who generates envi spam? >> >> Look in your server logs for BE80AB81E65 and see who sent. Hopefully you >> have SMTP AUTH turned on, otherwise you'll just get a source IP to track >> down. >> >> -- >> Bill Weiss
i.e try grep BE80AB81E65 /var/log/mail or /var/log/mail.log to find out whats going on about that mail if you have no idea what SMTP AUTH is you should better shut down the server temp and read postfix docs about setup/config and/or get some paid help service come back here, post your config , ask questions, fix your setup , turn on the server again -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria
