mail01:/var/log# grep 6F38E5F4595 mail.info
Nov 11 07:02:29 mail01 postfix/qmgr[26195]: 6F38E5F4595:
from=<[EMAIL PROTECTED]>, size=2091, nrcpt=9 (queue active)
Nov 11 07:02:32 mail01 postfix/smtp[19552]: 6F38E5F4595: host
mx2.comcast.net[76.96.30.116] refused to talk to me: 554
IMTA18.emeryville.c
;[EMAIL PROTECTED]
.com>, Message-ID: <[EMAIL PROTECTED]>,
mail_id: pkABmjwsgQrI, Hits: 4.223, size: 1493, 39548 ms
appearantly the guy got himself on a blacklist there...
But how can I further trace how he got in ?
-Original Message-----
From: Wietse Venema [mailto:[EMAIL PROTECT
rg
Subject: Re: Spammers abusing my postfix box
On Tue, Nov 11, 2008 at 11:31:38AM -0300, Jaap Westerbeek wrote:
> I changed the order.
>
Note, my money is on "permit_sasl_authenticated" and weak credentials
(like user "test" password "test", ...) or stolen cre
I changed the order.
Thanks Wietse, I'll keep you posted :)
-Original Message-
From: Wietse Venema [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 11, 2008 11:09 AM
To: Jaap Westerbeek
Cc: postfix-users@postfix.org
Subject: Re: Spammers abusing my postfix box
Jaap Weste
d_data_restrictions = reject_unauth_pipelining
-Original Message-
From: Wietse Venema [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 11, 2008 10:07 AM
To: Jaap Westerbeek
Cc: postfix-users@postfix.org
Subject: Re: Spammers abusing my postfix box
Jaap Westerbeek:
> Received: from
x Refund.
(Your Refund Amount Is $620.50)
http://jeckle.lsi.umich.edu/ /IRS.html">Complete
Formular
Copyright © 2008 - Internal Revenue Service. All rights
reserved.
*** HEADER EXTRACTED deferred/6/6F38E5F4595 ***
named_attribute: encoding=7bit
*** MESSAGE FILE END deferred/
f you need more info or configs to help me , please let me know
Regards,
Jaap Westerbeek
_
I am using the Free version of SPAMfighter <http://www.spamfighter.com/len>
We are a community of 5.5 million users fighting spam.
SPAMfighter has removed 865 of my spam ema
