Re: Likely Spam.

2008-10-23 Thread mouss
Linux Addict a écrit : > > Thank you guys!! It worked. > > We have escalated to the DEV to fix the problem. Actually spammers are > exploiting "Email a Friend" option on our webpage inserting spam note, I like calling that "Email a victim" :) I once worked on a project which had a "Invite a fr

Re: Likely Spam.

2008-10-23 Thread Linux Addict
On Thu, Oct 23, 2008 at 5:49 PM, mouss <[EMAIL PROTECTED]> wrote: > Linux Addict a écrit : > > Unfortuantly that hosts also sends some legitimate mails. I just want to > > block those two mail ids for now. > > unfortunately for you, if the host is owned, it will find other sender > addresses... >

Re: Likely Spam.

2008-10-23 Thread Noel Jones
mouss wrote: Linux Addict a écrit : smtpd_sender_restrictions = hash:/etc/postfix/sender_access put the name of the check explicitely: smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/sender_access The OP is using deprecated but valid syntax. Postfix will assume

Re: Likely Spam.

2008-10-23 Thread Noel Jones
Linux Addict wrote: Unfortuantly that hosts also sends some legitimate mails. I just want to block those two mail ids for now. smtpd_sender_restrictions = hash:/etc/postfix/sender_access sender_access has following entries, but not working. [EMAIL PROTECTED]

Re: Likely Spam.

2008-10-23 Thread mouss
Linux Addict a écrit : > Unfortuantly that hosts also sends some legitimate mails. I just want to > block those two mail ids for now. unfortunately for you, if the host is owned, it will find other sender addresses... > > smtpd_sender_restrictions = hash:/etc/postfix/sender_access > put the na

Re: Likely Spam.

2008-10-23 Thread Linux Addict
On Thu, Oct 23, 2008 at 5:15 PM, Noel Jones <[EMAIL PROTECTED]> wrote: > Linux Addict wrote: > > >> >> On Tue, Oct 21, 2008 at 7:33 AM, Noel Jones <[EMAIL PROTECTED]> [EMAIL PROTECTED]>> wrote: >> >>Linux Addict wrote: >> >> >>Nevermind.. I did strings on one of the messages on "deferr

Re: Likely Spam.

2008-10-23 Thread Noel Jones
Linux Addict wrote: On Tue, Oct 21, 2008 at 7:33 AM, Noel Jones <[EMAIL PROTECTED] > wrote: Linux Addict wrote: Nevermind.. I did strings on one of the messages on "deferred" and got the information. use postcat -q QUEUEID | more

Re: Likely Spam.

2008-10-23 Thread Linux Addict
On Tue, Oct 21, 2008 at 7:33 AM, Noel Jones <[EMAIL PROTECTED]> wrote: > Linux Addict wrote: > >> >> Nevermind.. I did strings on one of the messages on "deferred" and got the >> information. >> >> > use > postcat -q QUEUEID | more > to view the contents of a queued messsage. > > -- > Noel Jones >

Re: Likely Spam.

2008-10-21 Thread Noel Jones
Linux Addict wrote: Nevermind.. I did strings on one of the messages on "deferred" and got the information. use postcat -q QUEUEID | more to view the contents of a queued messsage. -- Noel Jones

Re: Likely Spam.

2008-10-21 Thread Noel Jones
Linux Addict wrote: Regarding your problem, do what Noel said. check how the message entered your system by finding all message Could someone please point to the direction of documents for tracking Queue ID.? grep QUEUEID /var/log/maillog if the mail entered via the "pickup" service

Re: Likely Spam.

2008-10-21 Thread Linux Addict
On Tue, Oct 21, 2008 at 7:19 AM, Linux Addict <[EMAIL PROTECTED]>wrote: > > > On Tue, Oct 21, 2008 at 3:29 AM, mouss <[EMAIL PROTECTED]> wrote: > >> Linux Addict a écrit : >> >> > [snip] >> > local_recipient_maps = proxy:unix:passwd.byname $virtual_alias_maps >> > $alias_maps >> >> remove $virtual

Re: Likely Spam.

2008-10-21 Thread Linux Addict
On Tue, Oct 21, 2008 at 3:29 AM, mouss <[EMAIL PROTECTED]> wrote: > Linux Addict a écrit : > > > [snip] > > local_recipient_maps = proxy:unix:passwd.byname $virtual_alias_maps > > $alias_maps > > remove $virtual_alias_maps from local_recipient_maps. > > > [snip] > > mynetworks_style = class > > re

Re: Likely Spam.

2008-10-21 Thread mouss
Linux Addict a écrit : > [snip] > local_recipient_maps = proxy:unix:passwd.byname $virtual_alias_maps > $alias_maps remove $virtual_alias_maps from local_recipient_maps. > [snip] > mynetworks_style = class remove mynetworks_style (mynetworks is enough). > [snip] relay_domains = $mydestination

Re: Likely Spam.

2008-10-20 Thread Nikita Kipriyanov
Linux Addict пишет: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 50 disable_vrfy_command = yes fallback_transport = maildrop

Re: Likely Spam.

2008-10-20 Thread Noel Jones
Linux Addict wrote: On Mon, Oct 20, 2008 at 9:53 PM, Charles Marcus <[EMAIL PROTECTED] > wrote: On 10/20/2008 Linux Addict wrote: mynetworks = /etc/postfix/network_table Contents of this file could be instructive... All I have on the file is RF

Re: Likely Spam.

2008-10-20 Thread Linux Addict
On Mon, Oct 20, 2008 at 9:53 PM, Charles Marcus <[EMAIL PROTECTED]>wrote: > On 10/20/2008 Linux Addict wrote: > >> mynetworks = /etc/postfix/network_table >> > > Contents of this file could be instructive... > All I have on the file is RFC 1918 Address Space.

Re: Likely Spam.

2008-10-20 Thread Charles Marcus
On 10/20/2008 Linux Addict wrote: mynetworks = /etc/postfix/network_table Contents of this file could be instructive...

Re: Likely Spam.

2008-10-20 Thread Wietse Venema
Neil: > > On 20 Oct 2008, at 18:45, Linux Addict wrote: > > > > On Mon, Oct 20, 2008 at 6:41 PM, Neil <[EMAIL PROTECTED]> wrote: > > > > On 20 Oct 2008, at 18:39, Linux Addict wrote: > > > >> > >> > >> On Mon, Oct 20, 2008 at 6:33 PM, Neil <[EMAIL PROTECTED]> wrote: > >> On 20 Oct 2008, at 18:24,

Re: Likely Spam.

2008-10-20 Thread Neil
On 20 Oct 2008, at 18:45, Linux Addict wrote: On Mon, Oct 20, 2008 at 6:41 PM, Neil <[EMAIL PROTECTED]> wrote: On 20 Oct 2008, at 18:39, Linux Addict wrote: On Mon, Oct 20, 2008 at 6:33 PM, Neil <[EMAIL PROTECTED]> wrote: On 20 Oct 2008, at 18:24, Linux Addict wrote: Hi, Looks like our MX

Re: Likely Spam.

2008-10-20 Thread Linux Addict
On Mon, Oct 20, 2008 at 6:41 PM, Neil <[EMAIL PROTECTED]> wrote: > > On 20 Oct 2008, at 18:39, Linux Addict wrote: > > > > On Mon, Oct 20, 2008 at 6:33 PM, Neil <[EMAIL PROTECTED]> wrote: > >> On 20 Oct 2008, at 18:24, Linux Addict wrote: >> >> Hi, Looks like our MX servers are hit hard by a speci

Re: Likely Spam.

2008-10-20 Thread Neil
On 20 Oct 2008, at 18:39, Linux Addict wrote: On Mon, Oct 20, 2008 at 6:33 PM, Neil <[EMAIL PROTECTED]> wrote: On 20 Oct 2008, at 18:24, Linux Addict wrote: Hi, Looks like our MX servers are hit hard by a specific email address which is sending frequent mails trying to use our relay effe

Re: Likely Spam.

2008-10-20 Thread Linux Addict
On Mon, Oct 20, 2008 at 6:33 PM, Neil <[EMAIL PROTECTED]> wrote: > On 20 Oct 2008, at 18:24, Linux Addict wrote: > > Hi, Looks like our MX servers are hit hard by a specific email address > which is sending frequent mails trying to use our relay effectively many > mail servers seems to be blacklis

Re: Likely Spam.

2008-10-20 Thread Neil
On 20 Oct 2008, at 18:24, Linux Addict wrote: Hi, Looks like our MX servers are hit hard by a specific email address which is sending frequent mails trying to use our relay effectively many mail servers seems to be blacklisting. Oct 20 18:20:05 mx01 postfix/qmgr[6512]: DBB784BE68E: from=<[