#1  
Old 11th May 2010, 11:19
nokia80 nokia80 is offline
Senior Member
 
Join Date: Apr 2009
Posts: 178
Thanks: 27
Thanked 2 Times in 2 Posts
Send a message via Skype™ to nokia80
Default error in email warn log

hello all

since some days ago has become spam sending through postfix, and I get these errors in log warn

anyone here knows a solution for the server is not an open question ikmij reley so how can there so much spam is sent.



May 11 10:53:46 ns2 postfix/cleanup[3788]: warning: regexp map /etc/postfix/header_checks, line 2: ignoring unrecognized request
May 11 10:53:46 ns2 postfix/cleanup[3788]: warning: regexp map /etc/postfix/header_checks, line 4: ignoring unrecognized request
May 11 10:53:46 ns2 postfix/cleanup[3788]: warning: regexp map /etc/postfix/header_checks, line 6: ignoring unrecognized request
May 11 10:53:46 ns2 postfix/cleanup[3788]: warning: regexp map /etc/postfix/mime_header_checks, line 2: ignoring unrecognized request
May 11 10:53:47 ns2 postfix/cleanup[3793]: warning: regexp map /etc/postfix/header_checks, line 2: ignoring unrecognized request
May 11 10:53:47 ns2 postfix/cleanup[3793]: warning: regexp map /etc/postfix/header_checks, line 4: ignoring unrecognized request
May 11 10:53:47 ns2 postfix/cleanup[3793]: warning: regexp map /etc/postfix/header_checks, line 6: ignoring unrecognized request
May 11 10:53:47 ns2 postfix/cleanup[3793]: warning: regexp map /etc/postfix/mime_header_checks, line 2: ignoring unrecognized request
May 11 10:54:35 ns2 amavis[1585]: (01585-04-48) (!)FWD via SMTP: -> , 451 4.5.0 Bad resp. to MAIL FROM, id=01585-04-48, from MTA([127.0.0.1]:10025): 354 End data with .
May 11 10:56:20 ns2 spamd[2118]: dns: sendto() failed: Operation not permitted at /usr/share/perl5/Mail/SpamAssassin/DnsResolver.pm line 395.
May 11 10:56:39 ns2 postfix/cleanup[3893]: warning: regexp map /etc/postfix/header_checks, line 2: ignoring unrecognized request
May 11 10:56:39 ns2 postfix/cleanup[3893]: warning: regexp map /etc/postfix/header_checks, line 4: ignoring unrecognized request
May 11 10:56:39 ns2 postfix/cleanup[3893]: warning: regexp map /etc/postfix/header_checks, line 6: ignoring unrecognized request
May 11 10:56:39 ns2 postfix/cleanup[3893]: warning: regexp map /etc/postfix/mime_header_checks, line 2: ignoring unrecognized request


thanks michael
Reply With Quote
Sponsored Links
  #2  
Old 12th May 2010, 14:47
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,711
Thanks: 1,899
Thanked 2,702 Times in 2,545 Posts
Default

Maybe you have a vulnerable web application (contact form, etc.) that is abused by spammers. This guide might help you: http://www.howtoforge.com/how-to-log...tect-form-spam
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 12th May 2010, 20:04
nokia80 nokia80 is offline
Senior Member
 
Join Date: Apr 2009
Posts: 178
Thanks: 27
Thanked 2 Times in 2 Posts
Send a message via Skype™ to nokia80
 
Default

hi Falko

I did what you said, so I see no log in ISPConfig but that these logs

You said you paid to see where do I deposit money that I would like to have solved this thanks to the logs



warm log
May 12 19:31:37 ns2 postfix/smtpd[12187]: warning: Illegal address syntax from localhost.localdomain[127.0.0.1] in MAIL command:
May 12 19:31:37 ns2 amavis[4088]: (04088-17) (!)SEND via SMTP: -> ,ENVID=AM..20100512T173137Z@ns2.webhd.nl 501 5.1.7 Failed, id=04088-17, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax
May 12 19:31:37 ns2 amavis[4088]: (04088-17) (!)FAILED to notify admin: 501 5.1.7 Failed, id=04088-17, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax
May 12 19:33:46 ns2 postfix/smtp[12220]: warning: no MX host for ragingbull.com has a valid address record
May 12 19:48:09 ns2 postfix/smtpd[12918]: warning: Illegal address syntax from localhost.localdomain[127.0.0.1] in MAIL command:
May 12 19:48:09 ns2 amavis[5637]: (05637-16) (!)SEND via SMTP: -> ,ENVID=AM..20100512T174809Z@ns2.webhd.nl 501 5.1.7 Failed, id=05637-16, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax
May 12 19:48:09 ns2 amavis[5637]: (05637-16) (!)FAILED to notify admin: 501 5.1.7 Failed, id=05637-16, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax
May 12 19:52:17 ns2 postfix/smtpd[13047]: warning: Illegal address syntax from localhost.localdomain[127.0.0.1] in MAIL command:
May 12 19:52:17 ns2 amavis[4088]: (04088-20) (!)SEND via SMTP: -> ,ENVID=AM..20100512T175217Z@ns2.webhd.nl 501 5.1.7 Failed, id=04088-20, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax
May 12 19:52:17 ns2 amavis[4088]: (04088-20) (!)FAILED to notify admin: 501 5.1.7 Failed, id=04088-20, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax
May 12 19:58:17 ns2 postfix/smtpd[13160]: warning: Illegal address syntax from localhost.localdomain[127.0.0.1] in MAIL command:
May 12 19:58:17 ns2 amavis[13048]: (13048-01) (!)SEND via SMTP: -> ,ENVID=AM..20100512T175817Z@ns2.webhd.nl 501 5.1.7 Failed, id=13048-01, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax
May 12 19:58:17 ns2 amavis[13048]: (13048-01) (!)FAILED to notify admin: 501 5.1.7 Failed, id=13048-01, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax

maillog
May 12 20:00:00 ns2 postfix/smtp[13189]: 5A395232398: host mailrecv.ifrance.com[82.196.5.134] refused to talk to me: 450 Client host rejected: cannot find your hostname, [188.202.98.226]
May 12 20:00:01 ns2 postfix/smtpd[13152]: connect from localhost.localdomain[127.0.0.1]
May 12 20:00:01 ns2 postfix/smtpd[13152]: lost connection after CONNECT from localhost.localdomain[127.0.0.1]
May 12 20:00:01 ns2 postfix/smtpd[13152]: disconnect from localhost.localdomain[127.0.0.1]
May 12 20:00:01 ns2 pop3d: Connection, ip=[::ffff:127.0.0.1]
May 12 20:00:01 ns2 pop3d: Disconnected, ip=[::ffff:127.0.0.1]
May 12 20:00:01 ns2 imapd: Connection, ip=[::ffff:127.0.0.1]
May 12 20:00:01 ns2 imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0

thanks michael
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
FTP Problems wabz Installation/Configuration 6 11th January 2010 18:51
Unable to receve email aberrio Server Operation 16 8th July 2009 10:26
Daily mail logrotation?! schmidse Installation/Configuration 4 21st January 2008 13:55
CacheALL email problem no.2 Snowman General 2 2nd August 2007 09:45
Still have problem with istallation Nip Installation/Configuration 17 25th March 2007 15:35


All times are GMT +2. The time now is 00:31.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.