Re: Bombarded With Spam

2017-09-29 Thread Kirk Bocek
On 9/27/2017 3:02 AM, Matus UHLAR - fantomas wrote: Looks like sender address rejection. the error message seems to be custom, which means you should search for check_sender_access in your config file. Yes. Custom messages in sender_access you can't reject sender at HELO stage, because a

Re: Bombarded With Spam

2017-09-27 Thread Matus UHLAR - fantomas
On 26.09.17 12:02, Kirk Bocek wrote: Thank you Benny and Wietse. Things are better now. However I have lots of log entries like: Sep 26 11:57:52 amber postfix/smtpd[11213]: NOQUEUE: reject: RCPT from unknown[10.0.2.1]: 554 5.7.1 : Sender address rejected: No Spam; from= r...@wysina.com.tw> to

Re: Bombarded With Spam

2017-09-26 Thread Kirk Bocek
On 9/25/2017 7:34 AM, Benny Pedersen wrote: Kirk Bocek skrev den 2017-09-25 16:04: So I need to receive email from bocek.org and then relay it elsewhere. That's why I put that there. Is that wrong? yes each domain must not be listed in both places, sinc postfix need to know how to deliver

Re: Bombarded With Spam

2017-09-25 Thread Kirk Bocek
On 9/25/2017 7:34 AM, Benny Pedersen wrote: yes each domain must not be listed in both places, sinc postfix need to know how to deliver and route it to there destinations Okay, I set it back to mydestination = $myhostname, localhost.$mydomain, localhost The other stuff was me trying to ge

Re: Bombarded With Spam

2017-09-25 Thread Benny Pedersen
Kirk Bocek skrev den 2017-09-25 16:04: So I need to receive email from bocek.org and then relay it elsewhere. That's why I put that there. Is that wrong? yes each domain must not be listed in both places, sinc postfix need to know how to deliver and route it to there destinations dont fokus

Re: Bombarded With Spam

2017-09-25 Thread Kirk Bocek
On 9/25/2017 3:28 AM, Benny Pedersen wrote: grep bocek.org main.cf | wc -l simple rule is that domain names is final destination for postfix, so if you have bocek.org in mydestination AND in virtual_domain it does not work as you want So I need to receive email from bocek.org and then rel

Re: Bombarded With Spam

2017-09-25 Thread Benny Pedersen
Kirk Bocek skrev den 2017-09-25 00:21: Several complex things are happening. I need to accept mail from localhost for messages from an array controller. This host needs to relay mail from workstations on the LAN. This host is also accepting mail from several listed domains via the router. grep

Re: Bombarded With Spam

2017-09-24 Thread Wietse Venema
Wietse Venema: > Kirk Bocek: > > Sep 24 11:10:12 amber postfix/pickup[12058]: 6C5C41FCB3: uid=497 > > from= > > They are spamming through some local aplication, perhaps a web > service. What process is running as UID=497? > > $ grep '497:' /etc/passwd In other words the SPAM does not come in vi

Re: Bombarded With Spam

2017-09-24 Thread Wietse Venema
Kirk Bocek: > Sep 24 11:10:12 amber postfix/pickup[12058]: 6C5C41FCB3: uid=497 > from= They are spamming through some local aplication, perhaps a web service. What process is running as UID=497? $ grep '497:' /etc/passwd Wietse

Re: Bombarded With Spam

2017-09-24 Thread Kirk Bocek
On 9/24/2017 1:50 PM, Wietse Venema wrote: Kirk Bocek: I inadvertently set open relay on my server sometime ago. I've fixed it but I am now bombarded with spam messages. I'm seeing messages like: 6C5C41FCB3 5940 Sun Sep 24 11:10:12 bdnqkqhakis...@sfilc.com (delivery temporarily suspended:

Re: Bombarded With Spam

2017-09-24 Thread Kirk Bocek
On 9/24/2017 2:05 PM, Benny Pedersen wrote: Kirk Bocek skrev den 2017-09-24 22:27: Here is postconf -n: mydestination = $myhostname, localhost.$mydomain, localhost,    pvt, bocek.org,  bocekrealty.com relay_domains = $mydestination, localhost, $myhostname relay_recipient_maps = hash

Re: Bombarded With Spam

2017-09-24 Thread Benny Pedersen
Kirk Bocek skrev den 2017-09-24 22:27: Here is postconf -n: mydestination = $myhostname, localhost.$mydomain, localhost,pvt, bocek.org, bocekrealty.com relay_domains = $mydestination, localhost, $myhostname relay_recipient_maps = hash:/etc/postfix/relay_recipients do not list $m

Re: Bombarded With Spam

2017-09-24 Thread Wietse Venema
Kirk Bocek: > I inadvertently set open relay on my server sometime ago. I've fixed it > but I am now bombarded with spam messages. I'm seeing messages like: > > 6C5C41FCB3 5940 Sun Sep 24 11:10:12 bdnqkqhakis...@sfilc.com > (delivery temporarily suspended: lost connection with > mx-tw.mail.gm

Re: Bombarded With Spam

2017-09-24 Thread Kirk Bocek
On 9/24/2017 11:34 AM, Benny Pedersen wrote: Kirk Bocek skrev den 2017-09-24 20:25: That fill up my mailq. I've since blocked sflic.com but I get others with a gmail.com domain. How do I block or reject these messages? google loopback-only is the most simple one :) more help post postconf

Re: Bombarded With Spam

2017-09-24 Thread Benny Pedersen
Kirk Bocek skrev den 2017-09-24 20:25: That fill up my mailq. I've since blocked sflic.com but I get others with a gmail.com domain. How do I block or reject these messages? google loopback-only is the most simple one :) more help post postconf -n