From where comes these mails

[Jan Novak]

Hi,

i use a small postfix mail server with amavis and spamassassin.
Everything works fine, i get ~0,1% Spam (very low rate), the rest is
blocked.
But what i see is so many mails in the mailq without no sender address
like that (i have grepped the hole mail.log for the address
Schubert.Adolf9644):

Mar 16 11:58:44 mail postgrey[24950]: action=pass, reason=recipient
whitelist, client_name=unknown, client_address=178.173.171.236,
sender=***@shirazhamyar.ir,
recipient=***@estrichschmidt.de
Mar 16 11:58:48 mail postfix/qmgr[31896]: EB6E720D3D0:
from=<***@shirazhamyar.ir>, size=23984, nrcpt=1 (queue
active)
Mar 16 11:58:50 mail postfix/qmgr[31896]: 82A4620D3D3:
from=<***@shirazhamyar.ir>, size=24447, nrcpt=1 (queue
active)
Mar 16 11:58:50 mail amavis[21296]: (21296-11) Passed CLEAN
{RelayedOpenRelay}, [178.173.171.236]:11965 [178.173.171.236]
<***@shirazhamyar.ir> ->
<***@estrichschmidt.de>, Queue-ID: EB6E720D3D0,
Message-ID: <***@MacPro>, mail_id:
AyHyuOWp6cN4, Hits: 1.543, size: 23984, queued_as: 82A4620D3D3, 2213 ms
Mar 16 11:58:44 mail postgrey[24950]: action=pass, reason=recipient
whitelist, client_name=unknown, client_address=178.173.171.236,
sender=***@shirazhamyar.ir,
recipient=***@estrichschmidt.de
Mar 16 11:59:21 mail postfix/smtp[21455]: 8503620D3D0:
to=<***@shirazhamyar.ir>, relay=none, delay=31,
delays=0/0/31/0, dsn=4.4.1, status=deferred (connect to
mail.shirazhamyar.ir[178.173.128.29]:25: Connection timed out)


bfo

[d***@gmail.com]

Post by Jan Novak
Hi,
i use a small postfix mail server with amavis and spamassassin.
Everything works fine, i get ~0,1% Spam (very low rate), the rest is
blocked.
But what i see is so many mails in the mailq without no sender address
like that (i have grepped the hole mail.log for the address
Mar 16 11:58:44 mail postgrey[24950]: action=pass, reason=recipient
whitelist, client_name=unknown, client_address=178.173.171.236,
active)
active)
Mar 16 11:58:50 mail amavis[21296]: (21296-11) Passed CLEAN
{RelayedOpenRelay}, [178.173.171.236]:11965 [178.173.171.236]
AyHyuOWp6cN4, Hits: 1.543, size: 23984, queued_as: 82A4620D3D3, 2213 ms
Mar 16 11:58:44 mail postgrey[24950]: action=pass, reason=recipient
whitelist, client_name=unknown, client_address=178.173.171.236,
delays=0/0/31/0, dsn=4.4.1, status=deferred (connect to
mail.shirazhamyar.ir[178.173.128.29]:25: Connection timed out)
bfo

Hi

It looks like spam due to an open relay configuration but what do you mean by "no sender adress" ? I can read sender=***@shirazhamyar.ir entries in the logs.

Try to grep by queue ID to get the whole process.

Regards

Victor

[Jan Novak]

Post by d***@gmail.com

Post by Jan Novak
Hi,
i use a small postfix mail server with amavis and spamassassin.
Everything works fine, i get ~0,1% Spam (very low rate), the rest is
blocked.
But what i see is so many mails in the mailq without no sender address
like that (i have grepped the hole mail.log for the address
Mar 16 11:58:44 mail postgrey[24950]: action=pass, reason=recipient
whitelist, client_name=unknown, client_address=178.173.171.236,
active)
active)
Mar 16 11:58:50 mail amavis[21296]: (21296-11) Passed CLEAN
{RelayedOpenRelay}, [178.173.171.236]:11965 [178.173.171.236]
AyHyuOWp6cN4, Hits: 1.543, size: 23984, queued_as: 82A4620D3D3, 2213 ms
Mar 16 11:58:44 mail postgrey[24950]: action=pass, reason=recipient
whitelist, client_name=unknown, client_address=178.173.171.236,
delays=0/0/31/0, dsn=4.4.1, status=deferred (connect to
mail.shirazhamyar.ir[178.173.128.29]:25: Connection timed out)
bfo

Hi
Try to grep by queue ID to get the whole process.

Hi,

yes, my question was not correct. These mails are mails from postfix
Mailer deamon to the sender, that the recipient is not available on this
system (my domain is estrichschmidt.de) and this mails cant be sent,
because the non existing sender (spammer).

I have now activated on postfix, to not accept mails to non existing
user. Thats it :-)

thank you.

Jan