[postfix-es] Puede ser esto un intento de usarme como spam??

Basicline basicline en terra.es
Mie Mayo 28 18:15:18 CEST 2003


Hace un tiempo que al mirar el estado de la cola con un postqueue -p me
salen mensajes de este tipo:

----------------------------------------------------------------------------
----------------------------
-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
C4C4118FBC     3482 Wed May 28 15:36:01  MAILER-DAEMON
                (connect to miledatarun.com[203.15.67.20]: Connection
refused)
                                         HyacinthBedonie en miledatarun.com
----------------------------------------------------------------------------
----------------------------

Por supuesto no conozco la direccion.

Mirando el fichero mail.log me encuentro con esto:

----------------------------------------------------------------------------
----------------------------
May 28 15:35:46 midominio postfix/smtpd[1159]: connect from
unknown[203.15.67.20]
May 28 15:35:49 midominio postfix/smtpd[1159]: B0D1318FBB:
client=unknown[203.15.67.20]
May 28 15:36:00 midominio postfix/cleanup[1160]: B0D1318FBB:
message-id=<20030528033912.7505.qmail en miledatarun.com>
May 28 15:36:00 midominio postfix/nqmgr[279]: B0D1318FBB:
from=<HyacinthBedonie en miledatarun.com>, size=1761, nrcpt=1 (queue active)
May 28 15:36:01 midominio postfix/smtpd[1167]: connect from
localhost[127.0.0.1]
May 28 15:36:01 midominio postfix/smtpd[1167]: 407B218FC0:
client=localhost[127.0.0.1]
May 28 15:36:01 midominio postfix/cleanup[1160]: 407B218FC0:
message-id=<20030528033912.7505.qmail en miledatarun.com>
May 28 15:36:01 midominio postfix/nqmgr[279]: 407B218FC0:
from=<HyacinthBedonie en miledatarun.com>, size=1967, nrcpt=1 (queue active)
May 28 15:36:01 midominio postfix/pipe[1162]: B0D1318FBB:
to=<prueba en midominio.com>, relay=vscan, delay=12, status=sent
(midominio.com)
May 28 15:36:01 midominio postfix/smtpd[1167]: disconnect from
localhost[127.0.0.1]
May 28 15:36:01 midominio postfix/local[1168]: 407B218FC0:
to=<prueba en midominio.com>, relay=local, delay=0, status=bounced (unknown
user: "prueba")
May 28 15:36:01 midominio postfix/cleanup[1160]: C4C4118FBC:
message-id=<20030528133601.C4C4118FBC en midominio.com>
May 28 15:36:01 midominio postfix/nqmgr[279]: C4C4118FBC: from=<>,
size=3482, nrcpt=1 (queue active)
May 28 15:36:02 midominio postfix/smtpd[1159]: disconnect from
unknown[203.15.67.20]
May 28 15:36:12 midominio postfix/smtp[1171]: connect to
miledatarun.com[203.15.67.20]: Connection refused (port 25)
May 28 15:36:12 midominio postfix/smtp[1171]: C4C4118FBC:
to=<HyacinthBedonie en miledatarun.com>, relay=none, delay=11, status=deferred
(connect to miledatarun.com[203.15.67.20]: Connection refused)
May 28 15:36:58 midominio in.qpopper[1179]: (v4.0.4) Unable to get canonical
name of client 192.168.1.26: Unknown host (1) [pop_init.c:1075]


May 28 15:42:28 midominio postfix/smtpd[1207]: connect from
unknown[218.70.117.225]
May 28 15:42:32 midominio postfix/smtpd[1207]: 3BDBB18FC1:
client=unknown[218.70.117.225]
May 28 15:42:33 midominio postfix/smtpd[1207]: reject: RCPT from
unknown[218.70.117.225]: 554 <doreen en ctwa.cq.cn>: Recipient address
rejected: Relay access denied; from=<bss en fre.sg.co.nz>
to=<doreen en ctwa.cq.cn>
May 28 15:42:42 midominio postfix/smtpd[1207]: lost connection after RCPT
from unknown[218.70.117.225]
May 28 15:42:42 midominio postfix/cleanup[1210]: 274BF18FC2:
message-id=<20030528134242.274BF18FC2 en midominio.com>
May 28 15:42:42 midominio postfix/nqmgr[279]: 274BF18FC2:
from=<double-bounce en midominio.com>, size=901, nrcpt=1 (queue active)
May 28 15:42:42 midominio postfix/smtpd[1207]: disconnect from
unknown[218.70.117.225]
May 28 15:42:42 midominio postfix/local[1211]: warning: required alias not
found: postmaster
May 28 15:42:42 midominio postfix/local[1211]: 274BF18FC2:
to=<postmaster en midominio.com>, relay=local, delay=0, status=sent (discarded)
May 28 15:48:47 midominio in.qpopper[1215]: (v4.0.4) Unable to get canonical
name of client 192.168.1.26: Unknown host (1) [pop_init.c:1075]


May 28 15:52:23 midominio postfix/smtpd[1226]: connect from
unknown[65.77.116.18]
May 28 15:52:29 midominio postfix/smtpd[1226]: 9DDBB18FC0:
client=unknown[65.77.116.18]
May 28 15:52:31 midominio postfix/smtpd[1226]: reject: RCPT from
unknown[65.77.116.18]: 554 <ipadminb en vmoptions.com>: Recipient address
rejected: Relay access denied; from=<smtp2001soho en yahoo.com>
to=<ipadminb en vmoptions.com>
May 28 15:52:38 midominio postfix/cleanup[1229]: 2C4DF18FC1:
message-id=<20030528135238.2C4DF18FC1 en midominio.com>
May 28 15:52:38 midominio postfix/nqmgr[279]: 2C4DF18FC1:
from=<double-bounce en midominio.com>, size=713, nrcpt=1 (queue active)
May 28 15:52:38 midominio postfix/smtpd[1226]: disconnect from
unknown[65.77.116.18]
May 28 15:52:38 midominio postfix/local[1230]: warning: required alias not
found: postmaster
May 28 15:52:38 midominio postfix/local[1230]: 2C4DF18FC1:
to=<postmaster en midominio.com>, relay=local, delay=0, status=sent (discarded)
May 28 15:57:47 midominio in.qpopper[1249]: (v4.0.4) Unable to get canonical
name of client 192.168.2.87: Unknown host (1) [pop_init.c:1075]




May 28 15:59:03 midominio postfix/nqmgr[279]: C4C4118FBC: from=<>,
size=3482, nrcpt=1 (queue active)
May 28 15:59:06 midominio postfix/smtp[1254]: connect to
miledatarun.com[203.15.67.20]: Connection refused (port 25)
May 28 15:59:06 midominio postfix/smtp[1254]: C4C4118FBC:
to=<HyacinthBedonie en miledatarun.com>, relay=none, delay=1385,
status=deferred (connect to miledatarun.com[203.15.67.20]: Connection
refused)
----------------------------------------------------------------------------
----------------------------------------------------------------------------
----------------------------





Os agradeceria cualquier comentario.



Un saludo.




-
Para ENVIAR mensajes a esta lista tienes que estar SUSCRITO a ella.
.
Envía la linea "unsubscribe postfix-es" en el cuerpo de un mensaje
a majordomo en WL0.org para quitarte de la lista.



Más información sobre la lista de distribución Postfix-es