[Postfix-es] Virus Sober

Juan Carlos Bravo Celis elbravito en gmail.com
Lun Dic 19 18:34:31 CET 2005


Estimados amigos,
tengo un problema con el virus worm.sober, yo teng configurado el postfix +
amavis + spamassassin, pero aparentemente tengo algo mal configurado que me
estan llegando muchos correos con el mensaje : " su correo no ha sido
entregado a los siguientes destinatarios y me muestra una lista muy grande
de direcciones y al final me indica que mi correo tiene el virus sober.u y
esto ya me ha traido problemas debido a que me pusieron en la lista negra de
spamhaus.org, y actualmente me estan llegando 100 mil correos por dia con
ese contenido, les envio el resultado de ejecutar postconf -n, espero puedan
ayudarme

 alias_maps = hash:/etc/aliases
allow_untrusted_routing = no
broken_sasl_auth_clients = yes
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = vscan:
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
default_process_limit = 6
disable_dns_lookups = no
disable_vrfy_command = yes
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = all
local_recipient_maps = $alias_maps
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command = /usr/bin/procmail
mailbox_size_limit = 0
mailbox_transport = lmtp:unix:public/lmtp
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains = serpost.com.pe
masquerade_exceptions = root
message_size_limit = 4400000
mydestination = $myhostname,$mydomain
mydomain = serpost.com.pe
myhostname = mail.serpost.com.pe
mynetworks = 11.1.0.0/16, 10.10.10.10,localhost
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
relayhost =
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
show_user_unknown_table_name = no
smtp_sasl_auth_enable = no
smtp_use_tls = no
smtpd_banner = SMTP *************
smtpd_client_restrictions = reject_non_fqdn_sender,
reject_unknown_sender_domain,   permit_sasl_authenticated,
permit_mynetworks,   reject_rbl_client sbl.spamhaus.org,   reject_rbl_client
relays.ordb.org,   reject_rbl_client bl.spamcop.net,   reject_rbl_client
dun.dnsrbl.net,   permit
smtpd_error_sleep_time = 1s
smtpd_etrn_restrictions = reject
smtpd_hard_error_limit = 10
smtpd_helo_required = yes
smtpd_helo_restrictions = reject_invalid_hostname
smtpd_recipient_restrictions = check_sender_access
hash:/etc/postfix/restricted_senders  permit_mynetworks,
permit_sasl_authenticated,  reject_non_fqdn_sender,
reject_non_fqdn_recipient,  reject_unauth_destination,
reject_unauth_pipelining,  reject_invalid_hostname,
reject_unknown_sender_domain,  reject_unknown_recipient_domain,
check_recipient_access pcre:/etc/postfix/recipient_checks.pcre,
check_helo_access hash:/etc/postfix/helo_checks,  reject_rbl_client
relays.ordb.org,  reject_rbl_client opm.blitzed.org,  reject_rbl_client
bl.spamcop.net,  reject_rbl_client sbl-xbl.spamhaus.org
smtpd_restriction_classes = local_only
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
smtpd_sender_login_maps = hash:/etc/postfix/sender_login
smtpd_sender_restrictions = hash:/etc/postfix/access,
reject_unknown_sender_domain   reject_unknown_sender_domain,
reject_non_fqdn_sender,   permit
smtpd_soft_error_limit = 60
smtpd_use_tls = no
strict_rfc821_envelopes = no
swap_bangpath = no
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550


si encuentran algo que este mal configurado por favor diganmelo.

Saludos
JC
------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: http://lists.wl0.org/pipermail/postfix-es/attachments/20051219/b18b192e/attachment.html


Más información sobre la lista de distribución Postfix-es