Re: I'm an open relay some how

2011-12-30 Thread Wietse Venema
Stephen Atkins: > So is this valid or bad? > > smtpd_recipient_restrictions = >permit_mynetworks, >permit_sasl_authenticated, >reject_unauth_destination, This is safe. When you put the access table lookups after these, then you can't become an open relay. Wietse

Re: I'm an open relay some how

2011-12-30 Thread Stephen Atkins
On 12/30/2011 4:11 PM, Wietse Venema wrote: Stephen Atkins: On 12/30/2011 3:59 PM, Wietse Venema wrote: Stephen Atkins: So it turns out my replacement while I was on vacation modified my main.cf. I went back to an back up I have a few weeks ago and changed it back. Now I don't have that prob

Re: I'm an open relay some how

2011-12-30 Thread Wietse Venema
Stephen Atkins: > On 12/30/2011 3:59 PM, Wietse Venema wrote: > > Stephen Atkins: > >> So it turns out my replacement while I was on vacation modified my > >> main.cf. I went back to an back up I have a few weeks ago and changed > >> it back. Now I don't have that problem any more. What it came

Re: I'm an open relay some how

2011-12-30 Thread Stephen Atkins
On 12/30/2011 3:59 PM, Wietse Venema wrote: Stephen Atkins: So it turns out my replacement while I was on vacation modified my main.cf. I went back to an back up I have a few weeks ago and changed it back. Now I don't have that problem any more. What it came down to was "check_relay_domains"

Re: I'm an open relay some how

2011-12-30 Thread Wietse Venema
Stephen Atkins: > So it turns out my replacement while I was on vacation modified my > main.cf. I went back to an back up I have a few weeks ago and changed > it back. Now I don't have that problem any more. What it came down to > was "check_relay_domains" had been removed for some reason. U

Re: I'm an open relay some how

2011-12-30 Thread Stephen Atkins
On 12/30/2011 2:12 PM, /dev/rob0 wrote: On Friday 30 December 2011 14:46:46 Lorens Kockum wrote: On Fri, Dec 30, 2011 at 12:51:27PM -0600, Noel Jones wrote: These are rejected and not useful to our discussion. Please show ALL the postfix logging of a suspect transaction that makes it to your q

Re: I'm an open relay some how

2011-12-30 Thread /dev/rob0
On Friday 30 December 2011 14:46:46 Lorens Kockum wrote: > On Fri, Dec 30, 2011 at 12:51:27PM -0600, Noel Jones wrote: > > These are rejected and not useful to our discussion. Please > > show ALL the postfix logging of a suspect transaction that > > makes it to your queue. In particular, we want

Re: I'm an open relay some how

2011-12-30 Thread Lorens Kockum
On Fri, Dec 30, 2011 at 12:51:27PM -0600, Noel Jones wrote: > These are rejected and not useful to our discussion. Please show > ALL the postfix logging of a suspect transaction that makes it to > your queue. In particular, we want to see if there is a > sasl_username= line logged for a suspiciou

Re: I'm an open relay some how

2011-12-30 Thread Noel Jones
On 12/30/2011 11:31 AM, Stephen Atkins wrote: > > Here is the output of my postconf -n > > bounce_queue_lifetime = 2h Instead of covering up the problem of a queue full of bounces, don't accept mail you aren't able to deliver. This usually means don't use wildcard aliases, do correctly populat

Re: I'm an open relay some how

2011-12-30 Thread Wietse Venema
Stephen Atkins: > sorry for the inconvenience. Looks like I just have to fix that. > Here's the log of a couple: > > Dec 30 10:29:02 mta5 postfix/smtpd[3679]: E6F13186001: reject: RCPT from > unknown[113.94.89.26]: 554 5.7.1 : Recipient > address rejected: 521; from= > to= proto=ESMTP helo= >

RE: I'm an open relay some how

2011-12-30 Thread Paul A
same username, from address etc and determine the problem that way. -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Stephen Atkins Sent: Friday, December 30, 2011 12:31 PM To: postfix users Cc: Noel Jones Subject: Re: I'm an

Re: I'm an open relay some how

2011-12-30 Thread Stephen Atkins
On 12/30/2011 10:26 AM, Noel Jones wrote: On 12/30/2011 11:19 AM, Stephen Atkins wrote: On 12/30/2011 10:17 AM, Gary Smith wrote: I've been administering the same postfix server for years so I'm a little confused as to how this happened. Granted postifx hasn't been updated in a year or so. Th

Re: I'm an open relay some how

2011-12-30 Thread Stephen Atkins
On 12/30/2011 10:19 AM, Stephen Atkins wrote: On 12/30/2011 10:17 AM, Gary Smith wrote: I've been administering the same postfix server for years so I'm a little confused as to how this happened. Granted postifx hasn't been updated in a year or so. This morning I came in to a mailq of over 9300

Re: I'm an open relay some how

2011-12-30 Thread Noel Jones
On 12/30/2011 11:19 AM, Stephen Atkins wrote: > On 12/30/2011 10:17 AM, Gary Smith wrote: >>> I've been administering the same postfix server for years so I'm >>> a little >>> confused as to how this happened. Granted postifx hasn't been >>> updated in a >>> year or so. >>> >>> This morning I came

Re: I'm an open relay some how

2011-12-30 Thread Reindl Harald
Am 30.12.2011 18:19, schrieb Stephen Atkins: > On 12/30/2011 10:17 AM, Gary Smith wrote: >>> I've been administering the same postfix server for years so I'm a little >>> confused as to how this happened. Granted postifx hasn't been updated in a >>> year or so. >>> >>> This morning I came in to

Re: I'm an open relay some how

2011-12-30 Thread Stephen Atkins
On 12/30/2011 10:17 AM, Gary Smith wrote: I've been administering the same postfix server for years so I'm a little confused as to how this happened. Granted postifx hasn't been updated in a year or so. This morning I came in to a mailq of over 93000 messages all destine to @yahoo.com.tw For n

RE: I'm an open relay some how

2011-12-30 Thread Gary Smith
> I've been administering the same postfix server for years so I'm a little > confused as to how this happened. Granted postifx hasn't been updated in a > year or so. > > This morning I came in to a mailq of over 93000 messages all destine to > @yahoo.com.tw > > For now I'm just blocking all ema