Re: Spam über Postfix

[usenet at schani.com]

Kann man die sendmail Funktion abschalten, also das keine Mail lokal 
angenommen wird?

hier die Logs:


  fgrep msg1466779375 at meinedomain.de /var/log/mail.*
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[8090]: < 
localhost.localdomain[127.0.0.1]: MAIL FROM:<msg1466779375 at meinedomain.de>
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[8090]: 
extract_addr: input: <msg1466779375 at meinedomain.de>
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[8090]: 
smtpd_check_addr: addr=msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[8090]: send attr 
address = msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[8090]: input 
attribute value: msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[8090]: 
rewrite_clnt: local: msg1466779375 at meinedomain.de -> 
msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[8090]: send attr 
address = msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[8090]: input 
attribute value: msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[8090]: 
resolve_clnt: `' -> `msg1466779375 at meinedomain.de' -> transp=`dovecot' 
host=`meinedomain.de' rcpt=`msg1466779375 at meinedomain.de' flags= 
class=virtual
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[8090]: 
ctable_locate: install entry key msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[8090]: 
extract_addr: in: <msg1466779375 at meinedomain.de>, result: 
msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/qmgr[25887]: 1F28316AE6: 
from=<msg1466779375 at meinedomain.de>, size=1666, nrcpt=1 (queue active)
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[7274]: < 
localhost.localdomain[127.0.0.1]: MAIL FROM: <msg1466779375 at meinedomain.de>
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[7274]: 
extract_addr: input: <msg1466779375 at meinedomain.de>
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[7274]: 
smtpd_check_addr: addr=msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[7274]: send attr 
address = msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[7274]: input 
attribute value: msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[7274]: 
rewrite_clnt: local: msg1466779375 at meinedomain.de -> 
msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[7274]: send attr 
address = msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[7274]: input 
attribute value: msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[7274]: 
resolve_clnt: `' -> `msg1466779375 at meinedomain.de' -> transp=`dovecot' 
host=`meinedomain.de' rcpt=`msg1466779375 at meinedomain.de' flags= 
class=virtual
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[7274]: 
ctable_locate: install entry key msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/smtpd[7274]: 
extract_addr: in: <msg1466779375 at meinedomain.de>, result: 
msg1466779375 at meinedomain.de
/var/log/mail.info:Jun 24 16:42:56 wwl7 postfix/qmgr[25887]: 5392D16AEF: 
from=<msg1466779375 at meinedomain.de>, size=1661, nrcpt=1 (queue active)
/var/log/mail.info:Jun 24 16:49:24 wwl7 postfix/qmgr[25887]: 1F28316AE6: 
from=<msg1466779375 at meinedomain.de>, size=1666, nrcpt=1 (queue active)
/var/log/mail.info:Jun 24 16:59:24 wwl7 postfix/qmgr[25887]: 1F28316AE6: 
from=<msg1466779375 at meinedomain.de>, size=1666, nrcpt=1 (queue active)
/var/log/mail.info:Jun 24 17:19:24 wwl7 postfix/qmgr[25887]: 1F28316AE6: 
from=<msg1466779375 at meinedomain.de>, size=1666, nrcpt=1 (queue active)


Christian


Am 24.06.2016 um 16:36 schrieb Ralf Hildebrandt:
> * usenet at schani.com <usenet at schani.com>:
>> Hallo,
>>
>> ich habe zur Zeit das Problem das mir Postfix Spammails von nicht
>> existierenden lokalen Email Adressen an aol.com sendet.
> Logs?
>   
>> Message-ID: <865507253.2975317.1466757621203 at meinedomain.de>
> fgrep 865507253.2975317.1466757621203 at meinedomain.de /var/log/mail*
>
>> Was mich stutzig macht ist das Postfix die Email eigentlich ja gar nicht
>> senden darf. OpenRelay ist der Server aber nicht.
>>
>> Laut Config von Postfix sollten nur hinterlegte Email Konten senden dürfen:
> Nö. Via smtp vielleicht. Aber lokal generierte Mails werden keinen
> Tests unterzogen.
>
> Logs!
>