Re: Spam Attack on my outgoing server

2010-01-12 Thread Terry Carmen
On 01/12/2010 09:50 AM, Damian Rivas wrote: Yeah, I've figured out that the problem was a Firewall vulnerability issue, port 25 was open to anyone. I've fixed that and problem solved! Thanks to you all for your help and my apologies because it was not a Postfix issue at all, Don't feel bad.

Re: Spam Attack on my outgoing server

2010-01-12 Thread /dev/rob0
On Tue, Jan 12, 2010 at 11:50:19AM -0300, Damian Rivas wrote: > >Another possibility, as you mentioned that this is the gateway for > >Postfix, is that it has a misconfigured firewall that is doing > >both source and destination NAT of port 25 to your Postfix. I just > >tested this, and was unab

RE: Spam Attack on my outgoing server

2010-01-12 Thread Damian Rivas
>>>On Mon, Jan 11, 2010 at 06:15:21PM -0300, Damian Rivas wrote: > >> mynetworks = 127.0.0.0/8, 200.55.14.248/29, 190.210.52.88/29 > > >These are the hosts allowed to relay. Don't mung the IP addresses. snip >> All mailing incomes seem to come from ns1.cht.com.ar, which is a >> gateway for the i

Re: Spam Attack on my outgoing server

2010-01-11 Thread /dev/rob0
On Mon, Jan 11, 2010 at 06:15:21PM -0300, Damian Rivas wrote: > >> mynetworks = 127.0.0.0/8, 200.55.14.248/29, 190.210.52.88/29 > > >These are the hosts allowed to relay. Don't mung the IP addresses. snip > All mailing incomes seem to come from ns1.cht.com.ar, which is a > gateway for the intern

RE: Spam Attack on my outgoing server

2010-01-11 Thread Damian Rivas
>De: owner-postfix-us...@postfix.org [mailto:owner-postfix->us...@postfix.org] >En nombre de /dev/rob0 >Enviado el: lunes, 11 de enero de 2010 16:50 >Para: postfix-users@postfix.org >Asunto: Re: Spam Attack on my outgoing server >>On Mon, Jan 11, 2010 at 03:27:05PM -

Re: Spam Attack on my outgoing server

2010-01-11 Thread Noel Jones
On 1/11/2010 1:44 PM, Damian Rivas wrote: Damian, Please ignore the above bad advice. An OK in smtpd_sender_restrictions can not possibly make you an open relay. Likely it didn't work as expected because the mail isn's submitted via SMTP. Before you waste time on any other bad advice you

Re: Spam Attack on my outgoing server

2010-01-11 Thread /dev/rob0
On Mon, Jan 11, 2010 at 04:44:23PM -0300, Damian Rivas wrote: Noel Jones > >Post logs here if you don't know how to evaluate them. > > >My wild guess is that you have an abused web form, but check > >the logs before you go running around telling everyone your > >web server is hacked. > > Noel,

Re: Spam Attack on my outgoing server

2010-01-11 Thread /dev/rob0
On Mon, Jan 11, 2010 at 03:27:05PM -0300, Damian Rivas wrote: > I have a Postfix box basically configured to send mail from my > organization to the Internet. Today I received a warning message > telling me that the mail queue was full. Who/what sent you that warning? > It seems that some Spamm

RE: Spam Attack on my outgoing server

2010-01-11 Thread Damian Rivas
>Damian, > >Please ignore the above bad advice. An OK in >smtpd_sender_restrictions can not possibly make you an open >relay. Likely it didn't work as expected because the mail >isn's submitted via SMTP. >Before you waste time on any other bad advice you may get, >examine your logs to see w

Re: Spam Attack on my outgoing server

2010-01-11 Thread Noel Jones
On 1/11/2010 1:11 PM, Brian Evans - Postfix List wrote: On 1/11/2010 1:27 PM, Damian Rivas wrote: Hello everyone, I have a Postfix box basically configured to send mail from my organization to the Internet. Today I received a warning message telling me that the mail queue was full. It seems

Re: Spam Attack on my outgoing server

2010-01-11 Thread Noel Jones
On 1/11/2010 1:00 PM, brian moore wrote: On Mon, 11 Jan 2010 15:27:05 -0300 "Damian Rivas" wrote: Hello everyone, I have a Postfix box basically configured to send mail from my organization to the Internet. Today I received a warning message telling me that the mail queue was full. It seem

Re: Spam Attack on my outgoing server

2010-01-11 Thread Brian Evans - Postfix List
On 1/11/2010 1:27 PM, Damian Rivas wrote: > Hello everyone, > > I have a Postfix box basically configured to send mail from my organization > to the Internet. Today I received a warning message telling me that the mail > queue was full. > > It seems that some Spammer is using my server as an Open

Re: Spam Attack on my outgoing server

2010-01-11 Thread brian moore
On Mon, 11 Jan 2010 15:27:05 -0300 "Damian Rivas" wrote: > Hello everyone, > > I have a Postfix box basically configured to send mail from my organization > to the Internet. Today I received a warning message telling me that the mail > queue was full. > > It seems that some Spammer is using m

Spam Attack on my outgoing server

2010-01-11 Thread Damian Rivas
Hello everyone, I have a Postfix box basically configured to send mail from my organization to the Internet. Today I received a warning message telling me that the mail queue was full. It seems that some Spammer is using my server as an Open Relay, so I used the "check_sender_access" function