hy,
thanks for replay.
my server postfix use smarthost "smart-relay.mail.inet.it"
the relay has been blocked because the address generated spam from:
freeelo...@hotmail.it

this is log for /var/log/mailllog:
May  8 08:18:41 neruda postfix/smtpd[3062]: BE80AB81E65:
client=localhost[127.0.0.1]
May  8 08:18:43 neruda postfix/cleanup[3208]: BE80AB81E65:
message-id=<62105.176.61.140.133.1336457923.squirrel@176.61.140.133>
May  8 08:18:43 neruda postfix/qmgr[188]: BE80AB81E65:
from=<freelo...@hotmail.com>, size=3272, nrcpt=900 (queue active)
May  8 08:58:24 neruda postfix/smtp[3628]: BE80AB81E65:
to=<goin...@hughes.net>, relay=smart-relay.mail.inet.it[213.92.5.135],
delay=2383, status=sent (250 ::ffff:212.239.122.39+6qwa3V5oRt Mail
accepted)
May  8 08:58:24 neruda postfix/smtp[3628]: BE80AB81E65:
to=<goneri...@hughes.net>,
relay=smart-relay.mail.inet.it[213.92.5.135], delay=2383, status=sent
(250 ::ffff:212.239.122.39+6qwa3V5oRt Mail accepted)
May  8 08:58:24 neruda postfix/smtp[3628]: BE80AB81E65:
to=<goodkindgi...@hughes.net>,
relay=smart-relay.mail.inet.it[213.92.5.135], delay=2383, status=sent
(250 ::ffff:212.239.122.39+6qwa3V5oRt Mail accepted)
........


perhaps using the webmail with this ip 176.61.140.133
BE80AB81E65: 
message-id=<62105.176.61.140.133.1336457923.squirrel@176.61.140.133>


#postconf -n

alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
default_process_limit = 100
defer_transports = uucp
delay_warning_time = 30m
header_checks = regexp:/etc/postfix/header_checks
inet_interfaces = all
mail_owner = postfix
mail_spool_directory = /var/spool/mail
mailbox_command = /usr/bin/procmail
mailbox_size_limit = 1004800000
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maximal_backoff_time = 2h
maximal_queue_lifetime = 1d
message_size_limit = 102400000
minimal_backoff_time = 1h
mydestination = $mydomain,esempio.it (local domain)
mydomain = esempio.it
myhostname = mail.esempio.it
mynetworks = 192.168.1.0/24
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
queue_run_delay = 10m
readme_directory = /usr/share/doc/postfix-1.1.11/README_FILES
relay_domains = $mydestination
sample_directory = /usr/share/doc/postfix-1.1.11/samples
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_helo_required = yes
strict_rfc821_envelopes = yes
swap_bangpath = no
virtual_mailbox_limit = 1004800000


how can I find the account used to send spam?

thanks








2012/5/9 mouss <mo...@ml.netoyen.net>:
> Le 08/05/2012 23:10, Giuseppe Perna a écrit :
>> hy,
>> i have an old version of postfix.
>> i have this problem: from my server with sender freelo...@hotmail.com
>> leave hundreds of spam messages to the Internet, I analyzed the file /
>> var / log / maillog and I see this:
>> BE80AB81E65     3272 Tue May  8 08:18:41  freelo...@hotmail.com
>> (host smart-relay.mail.pippo.it[210.91.5.137] said: 451 DNS temporary
>> error. (in reply to RCPT TO command))
>>                                          g...@m2.lvlfe.com
>>                                          gogrant...@mn.rr.com
>>                                          gore...@mn.rr.com
>>                                          goverl...@mn.rr.com
>>                                          gpinv...@mstarmetro.net
>>
>> how can I check who is the real user who generates envi spam?
>>
>
> thank you for contacting us.
>
> please read the fine directions described in
>        http://www.postfix.org/DEBUG_README.html#mail
>
> there is no chance that we yunderstand what happens in your platform
> unless you explain it clearly.
>
> and stating "my server generates spam" won't make it urgent for us.



--

Reply via email to