too many Sender address rejected error

Hi, one of our user lost his own e-mail password. Anyway we reseted password and removed spam e-mails. But now , when i look in maillog too many sender adress rejected messages come all around the world :( is it fake or true? What is the solution for this. May 30 10:00:04 mail postfix/smtpd[6756]

Re: Postfix and BINARYMIME

tejas sarade: > > Apart from mislabeling what is most-likely in fact a CTE of "8bit" rather > > than binary, what problem does this actually cause? > > The problem is that Postfix frequently dropping connection of connection > exchange server with error > 502 5.5.2 Error: command not recognized >

Re: too many Sender address rejected error

Selcuk Yazar: > May 30 10:00:04 mail postfix/smtpd[6756]: NOQUEUE: reject: RCPT from > xedge2.campus.tue.nl[131.155.6.117]: 450 4.7.1 <>: Sender address rejected: > Access denied; from=<> to= proto=ESMTP helo=< > XEDGE2.campus.tue.nl> [three more examples rejecting mail from <>] Why are you reject

Re: too many Sender address rejected error

Hi, i think from=<> is empty or unknown, also this messages comes from log 4-5 times per second. we think some kind attack or mallware thing. but i'm not sure RCPT from > xedge2.campus.tue.nl[131.155.6.117] ip is real or not ? also the user in from part of log is a driver(no offence), i 'm sure h

Re: too many Sender address rejected error

Am 30.05.2014 13:51, schrieb Selcuk Yazar: > i think from=<> is empty or unknown you should not think, you should learn some basics *before* setup public MTA's <> is the NULL sender used for bounces, responders and sender verifyication you *MUST* accept that sender by RFC http://en.wikipedia.or

Re: too many Sender address rejected error

Selcuk Yazar: > i think from=<> is empty or unknown, also this messages comes from log 4-5 > times per second. we think some kind attack or mallware thing. Bt's typical for backscatter spam from MTAs that accept-then-reject. See http://www.postfix.org/BACKSCATTER_README.html > but i'm not sure RC

Re: too many Sender address rejected error

Hi our main.cf contains smtpd_client_restrictions = check_client_access hash:/etc/postfix/client_rules permit_mynetworks permit_sasl_authenticated reject_rbl_client bl.spamcop.net reject_rbl_client zen.spamhaus.org reject_rbl_client cbl.abuseat.org smtpd_sender_restrictions = check_policy_servic

Re: too many Sender address rejected error

Selcuk Yazar: > Hi > > our main.cf contains > [lots of stuff] > parameters. which parameter couse this ? "sender access denied" may be caused by any of the rules in the output from this command: postconf -n | grep sender Sorry, I am too lazy to get that from your main.cf dump because the li

RE: too many Sender address rejected error

Check /etc/postfix/sender_access Delete this line if exists in the file: /<>/ REJECT postmap etc/postfix/sender_access Postfix reload From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Selcuk Yazar Sent: Friday, May 30, 2014 3:42 PM To: Postfi

Re: too many Sender address rejected error

Selcuk Yazar: > On Fri, May 30, 2014 at 4:01 PM, Wietse Venema wrote: > > > postconf -n | grep sender > > postconf -n | grep sender > smtpd_sender_restrictions = > check_policy_service 127.0.0.1:10031, The check_policy_service may reject a sender with "access denied", including mail from

Re: too many Sender address rejected error

> > smtpd_sender_restrictions = > > check_policy_service 127.0.0.1:10031, > > we have policyd daemon. :( thank you for replies -- Selçuk YAZAR

Re: Postfix and BINARYMIME

On Fri, May 30, 2014 at 11:15:09AM +0530, tejas sarade wrote: > > Apart from mislabeling what is most-likely in fact a CTE of "8bit" rather > > than binary, what problem does this actually cause? > > The problem is that Postfix frequently dropping connection of connection > exchange server with e

Automate confirmation for abuse address

Having set up check_sender_ns_access for our previously reported suspect and associates. And having made numerous additional configuration changes as suggested we are, for now, apparently successfully dealing with this source of spam. In fact, this morning we had exactly three reported spam messag

half-OT: own DNSBL and honeypot

sorry for the more or less off-topic but i think here are the people with most expierience what i would like to do is: * setup whatever software listeing on port 25 * any IP connecting to that machine feed into a dns-zone file for a DNSBL currently i have a stripped down CentOS6 listening on a

Note for Postfix distro maintaines: dynamicmaps support

Postfix snapshot 20140530 now supports dynamically-loadable database plugins, and Postfix shared libraries. Dynamically-loadable database plugins are useful for people who create or install pre-compiled Postfix packages. Postfix shared libraries reduce the size of Postfix executable files

Re: half-OT: own DNSBL and honeypot

Am 30.05.2014 16:21, schrieb li...@rhsoft.net: > sorry for the more or less off-topic but i think > here are the people with most expierience > > what i would like to do is: > > * setup whatever software listeing on port 25 > * any IP connecting to that machine feed into > a dns-zone file for

Re: half-OT: own DNSBL and honeypot

Am 30.05.2014 16:32, schrieb li...@rhsoft.net: > Am 30.05.2014 16:21, schrieb li...@rhsoft.net: >> sorry for the more or less off-topic but i think >> here are the people with most expierience >> >> what i would like to do is: >> >> * setup whatever software listeing on port 25 >> * any IP connect

Re: half-OT: own DNSBL and honeypot

li...@rhsoft.net: > /** drop privileges to 'nobody' */ > if(!@posix_setgid(99) || !@posix_setuid(99)) PHP, eh? You also need to drop "secondary groups". On UNIX, that's done with setgroups() or initgroups(), before dropping root privileges. Wietse

Re: half-OT: own DNSBL and honeypot

Am 30.05.2014 16:32, schrieb li...@rhsoft.net: > > Am 30.05.2014 16:21, schrieb li...@rhsoft.net: >> sorry for the more or less off-topic but i think >> here are the people with most expierience >> >> what i would like to do is: >> >> * setup whatever software listeing on port 25 >> * any IP conne

Re: Note for Postfix distro maintaines: dynamicmaps support

LaMont Jones: > On Fri, May 30, 2014 at 10:33:08AM -0400, Wietse Venema wrote: > > Postfix snapshot 20140530 now supports dynamically-loadable database > > plugins, and Postfix shared libraries. > > The Postfix build/installation procedure has changed a bit, but > > the

Using pcre with check_helo_access

Hi, I'm using postfix-2.10.3 on fedora20 and I don't understand how to use pcre. I've read the pcre man page, but it doesn't explain how it applies to using it with check_helo_access and a pcre table. For a regular postmap hash, I would do the following for a host without a valid forward DNS entr

Re: half-OT: own DNSBL and honeypot

Am 30.05.2014 18:52, schrieb Wietse Venema: > li...@rhsoft.net: >> /** drop privileges to 'nobody' */ >> if(!@posix_setgid(99) || !@posix_setuid(99)) > > PHP, eh? yes, simply because it's the language i know to handle perfectly and the database insert / update is done within a few minutes af

Troubleshooting a delivery failure

One of my users is sending a message to an external organization and it bounced. The bounce doesn't seem to contain enough information for me to figure out what is going on on the remote end, but I noticed a line in the notification that didn't look right. Received-SPF: pass (mail215-ch1: domai

Re: Using pcre with check_helo_access

Alex: > I'm using postfix-2.10.3 on fedora20 and I don't understand how to use > pcre. I've read the pcre man page, but it doesn't explain how it applies to > using it with check_helo_access and a pcre table. Indeed. It explains how the PCRE lookup table works, not things like header_checks or acc

Re: half-OT: own DNSBL and honeypot

li...@rhsoft.net: > > You also need to drop "secondary groups". On UNIX, that's > > done with setgroups() or initgroups(), before dropping > > root privileges > > thanks for the hint, looks not that it's supported > http://www.php.net/manual/en/book.posix.php It took me a few seconds to find th

Re: half-OT: own DNSBL and honeypot

Am 30.05.2014 22:48, schrieb Wietse Venema: > li...@rhsoft.net: >>> You also need to drop "secondary groups". On UNIX, that's >>> done with setgroups() or initgroups(), before dropping >>> root privileges >> >> thanks for the hint, looks not that it's supported >> http://www.php.net/manual/en/bo

Re: half-OT: own DNSBL and honeypot

Am 30.05.2014 23:18, schrieb li...@rhsoft.net: > > Am 30.05.2014 22:48, schrieb Wietse Venema: >> li...@rhsoft.net: You also need to drop "secondary groups". On UNIX, that's done with setgroups() or initgroups(), before dropping root privileges >>> >>> thanks for the hint, looks