#1  
Old 26th February 2008, 19:36
rusty rusty is offline
Member
 
Join Date: Dec 2007
Posts: 45
Thanks: 5
Thanked 0 Times in 0 Posts
Default Postfix Spam Problem

I'm using greylisting and spam assassin with razor2 pyzor dcc and am very happy with the results.

here's my complaint: I see in my report that one domain in particular with only one user is getting 4000 or more per day "Reject Recipient Address"

This is tying up bandwidth and needlessly using up server resources. The IP addresses seem pretty varied. Probably infected machines spewing this garbage out.

Has anyone dealt with this successfully? I'm ready to get this user off my server even though they are just a victim too.

Thanks
Reply With Quote
Sponsored Links
  #2  
Old 27th February 2008, 12:54
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

I guess that some spammer is abusing that user's email address as the sender address for his spam. That's not the user's fault, but explains why he's getting all those "Reject Recipient Address" messages.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 27th February 2008, 14:51
rusty rusty is offline
Member
 
Join Date: Dec 2007
Posts: 45
Thanks: 5
Thanked 0 Times in 0 Posts
Default

Sorry, I didn't explain it well. I'm seeing those messages in a report derived from the logs. The spammer is trying every conceivable mailbox name for this domain trying to find one that is real. I have 20 different sender IPs sending to bill@domain.com, then another 20 sender IPs trying mark@domain.com, hundreds of different names everyday from multiple senders. Again totaling 4000 a day. It's been going on for some time and doesn't seem like it will stop. Seems like the sender machines are zombies.
Reply With Quote
  #4  
Old 28th February 2008, 19:29
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
 
Default

i'm not sure, but maybe greylisting helps against these bots...
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Ubuntu / Postfix problem - [newbie] barney.parker Server Operation 6 7th November 2007 13:44
Postfix: connection refused error tosin Server Operation 1 30th October 2007 17:30
Postfix sending problem - Gmail martini Server Operation 13 11th September 2007 21:48
Mail Server Problem after "How To Fight Spam Using Your Postfix Configuration" bluegrass Installation/Configuration 3 27th December 2006 16:03
Perfect Setup - Fedora Core 4 - postfix problem Median Installation/Configuration 7 2nd February 2006 12:21


All times are GMT +2. The time now is 14:07.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.