PDA

View Full Version : Urgent: Realy big Mail Delivery/Spam Problem


binover
2nd February 2009, 16:38
Guys one of my servers is Relaying spam as crazy, y stoped it a little droped conections from the spammer's Ips but now I donīt know why y can't deliver any mail saing "refused to talk to me: 554 5.7.1 Access denied".

here is my postfix's config

mail:/home/zen# postconf -n
alias_maps = hash:/etc/aliases
allow_mail_to_files = alias,forward,include
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
inet_protocols = all
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
message_size_limit = 20000000
mydestination = /etc/postfix/local-host-names
mynetworks = 127.0.0.0/8, 200.5.90.192/26, 192.168.0.0/16, 190.3.2.0/24, 192.168.0.0/16, 190.30.255.0/24, 190.136.23.0/24, 200.107.224.0/21
myorigin = /etc/mailname
recipient_delimiter = +
smtp_tls_note_starttls_offer = yes
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject _unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom

*I know "mynetworks" is very full of networks, it's just a test

here some lines of my log file

8428710:Feb 2 12:31:13 ns2 postfix/smtp[22083]: 2E1F21FC100: host mail2.navego.com.ar[201.251.135.172] refused to talk to me: 554 5.7.1 Access denied
8428853:Feb 2 12:31:14 ns2 postfix/smtp[22083]: 2E1F21FC100: to=<valeriasanchez@navego.com.ar>, relay=mail.navego.com.ar[201.251.135.172], delay=10, status=deferred (host mail.navego.com.ar[201.251.135.172] refused to talk to me: 554 5.7.1 Access denied)

I don't know what to do, this start to happend this week...
Any help is very usefull.

binover
2nd February 2009, 17:15
without touching anything the error change to "(delivery temporarily suspended: unknown mail transport error"

in the log

8972636:Feb 2 13:06:35 ns2 postfix/qmgr[21198]: 57FFD1FC0FF: to=<mary@estudioelia.com.ar>, relay=none, delay=2111, status=deferred (delivery temporarily suspended: unknown mail transport error)

binover
2nd February 2009, 18:33
Here are some warning I found in the log file, I donīt know if something is usefull:
---
Feb 2 14:28:39 ns2 postfix/qmgr[8221]: warning: premature end-of-input on private/smtp socket while reading input attribute name
Feb 2 14:28:39 ns2 postfix/qmgr[8221]: warning: private/smtp socket: malformed response
Feb 2 14:28:39 ns2 postfix/qmgr[8221]: warning: transport smtp failure -- see a previous warning/fatal/panic logfile record for the problem description
---

Feb 2 14:28:37 ns2 postfix/smtp[8329]: warning: Only sdbm: type allowed for btree:/var/spool/postfix/smtp_scache
Feb 2 14:28:37 ns2 postfix/smtp[8329]: warning: Could not open session cache btree:/var/spool/postfix/smtp_scache

falko
3rd February 2009, 20:53
Please check if you're blacklisted: http://mxtoolbox.com/blacklists.aspx

You should only have 127.0.0.0/8 in the mynetworks line; the other values are probably the reason that your server is abused by spammers.