Relay access denied

[brainz]

Hi Falko,

i also noticed this......

Errors in HELO/EHLO conversation:
greeted me with my own hostname tracs.tracshosting.com
: from 1 Host(s), 9 Time(s)
replied to HELO/EHLO with my own hostname tracs.tracshosting.com
: from 1 Host(s), 9 Time(s)

From:
Mail Delivery System <MAILER-DAEMON@cpe-60-229-253-45.static.nsw.bigpond.net.au>
To:
root@tracs.tracshosting.com
Date:
Today 21:00:03

This is the Postfix program at host CPE-60-229-253-45.static.nsw.bigpond.net.au.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to <postmaster>

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

The Postfix program

<admin@tracshosting.com>: mail for tracshosting.com loops back to myself

???

regards
brainz

[brainz]

Im to say now bind will not start up..???

regards
brainz

[falko]

Originally Posted by brainz

<admin@tracshosting.com>: mail for tracshosting.com loops back to myself

Please add tracshosting.com to /etc/postfix/local-host-names and restart Postfix.

[brainz]

Hi Falko,


i did this...

Please add tracshosting.com to /etc/postfix/local-host-names and restart Postfix.

and then i sent a email to admin@tracshosting.com and got this reply...

Delivery to the following recipient failed permanently:

admin@tracshosting.com

Technical details of permanent failure:
PERM_FAILURE: SMTP Error (state 9): 550 <admin@tracshosting.com>: Recipient address rejected: User unknown in local recipient table

regards
brainz

[brainz]

HI Falko

I also found this...

WARNING: service dns not running (server: tracs.tracshosting.com, port: 53)!

WARNING: service dns not running (server: tracs.tracshosting.com, port: 53)!

WARNING: service not running (server: tracs.tracshosting.com, port: 10000)!

Message generated at March 3, 2007, 9:30.

End of encapsulated message

???

Regards
brainz

[brainz]

hi Falko,


I was looking at a root log and it has this in it...

 --------------------- Kernel Begin ------------------------

Â
 WARNING:  Kernel Errors Present
  powernow-k8: Hardware error - pending bit ve ...:  1 Time(s)
  powernow-k8: error - out of sync, f ...:  1 Time(s)
Â
 ---------------------- Kernel End -------------------------

Â
 --------------------- pam_unix Begin ------------------------

 dovecot:
  Authentication Failures:
    rhost=::ffff:127.0.0.1 : 16 Time(s)
    rhost=::ffff:124.176.109.33 : 2 Time(s)
  Unknown Entries:
    check pass; user unknown: 18 Time(s)
Â
Â
 ---------------------- pam_unix End -------------------------

and this in it...

-- Connections (secure-log) Begin ------------------------

Â
 **Unmatched Entries**
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user mb126854b
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user mb126854d
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@tracshosting.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user enquiries@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user web_email@domain.com
Â
 ---------------------- Connections (secure-log) End -------------------------

Looks like the server from what i can tell is either dieing or its been hacked...

any ideas would be wonderful.. but i think i rebuild is what will fix

regards
brainz

[till]

Originally Posted by brainz

Hi Falko,

i did this...

and then i sent a email to admin@tracshosting.com and got this reply...

This means just that there is no email address admin@tracshosting.com existing. Have you created this email address in ISPConfig?

[brainz]

Hi Till,

Yes all the email address exist in ispconfig... i just edited them here so they cannot be used by bots etc....

but yes all the emails do exist in ispconfig...

except for these 2 which i dont know where they come from

 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user mb126854b
 dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user mb126854d

regards
brainz

[till]

Originally Posted by brainz

Hi Till,

Yes all the email address exist in ispconfig... i just edited them here so they cannot be used by bots etc....

but yes all the emails do exist in ispconfig...

except for these 2 which i dont know where they come from



regards
brainz

Does the email address exists in /etc/postfix/virtusertable too?

[brainz]

Hi Till,

Im sorry i am unable to check at the moment becuase i remotely restarted the server and there is no one there to log it into root until monday our time here in sydney australia...

Vnc will not allow me to connect after a reboot for some reason or another.

However as soon i get access to the server again i will check this and let you know.....

This is really upsetting me to the point that i might rebuild it again from scratch this time with a slave server as well....

regards
brainz