Backscatter

Discussion in 'Installation/Configuration' started by zetnsh, Jun 11, 2010.

  1. zetnsh

    zetnsh New Member

    Hi there,

    I know there's loads of stuff both on these forums and out on the net about preventing backscatter, but I'm totally confused and need help!

    I'm running ISPConfig 2.2.35 (haven't done the latest upgrade yet!) and I've found that my IP address is appearing on a blacklist at backscatter.org. Not much to see in the maillogs at the time of the problem, but here's a brief extract:
    Code:
    May 30 07:04:11 mail postfix/qmgr[21112]: 16D9518DEB14: from=<>, size=3892, nrcpt=1 (queue active)
    May 30 07:04:13 mail postfix/smtp[5793]: 16D9518DEB14: to=<[email protected]>, relay=mail1.adeptis.net[216.75.196.129]:25, delay=118176, delays=118174/0.01/1.9/0, dsn=4.4.2, status=deferred (lost connection with mail1.adeptis.net[216.75.196.129] while receiving the initial server greeting)
    May 30 08:14:11 mail postfix/qmgr[21112]: 16D9518DEB14: from=<>, size=3892, nrcpt=1 (queue active)
    May 30 08:14:13 mail postfix/smtp[12431]: 16D9518DEB14: to=<[email protected]>, relay=none, delay=122376, delays=122374/0.01/2.1/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=adeptis.com type=MX: Host not found, try again)
    May 30 09:24:11 mail postfix/qmgr[21112]: 16D9518DEB14: from=<>, size=3892, nrcpt=1 (queue active)
    May 30 09:24:13 mail postfix/smtp[20565]: 16D9518DEB14: to=<[email protected]>, relay=mail1.adeptis.net[216.75.196.129]:25, delay=126577, delays=126575/0/2/0, dsn=4.4.2, status=deferred (lost connection with mail1.adeptis.net[216.75.196.129] while receiving the initial server greeting)
    
    I suspect the server is becoming a source of backscatter emails, and no idea how to stop it! Obviously I don't want the machine to be on any blacklists, because then particularly picky mailservers will reject mail.

    Incidentally, The postfix config is exactly as ISPConfig set it up.

    Any help much appreciated!

    Neil
     
  2. Mark_NL

    Mark_NL New Member

    I had the same problem occuring some time ago, i fixed it by setting the following in amavis:

    Code:
    $final_spam_destiny = D_DISCARD;
    default is BOUNCE
     
  3. zetnsh

    zetnsh New Member

    Thanks, that does make sense, but it doesn't look like amavisd is running on my system here. I don't want to risk breaking a working configuration either! Any other suggestions anyone?
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    The ISPConfig 2 spamfilter does not bounce any mails. But maybe some of your users use autoresponders? This can be detected as backsacatter as a email is sent for every incoming email back to the recipient.
     
  5. zetnsh

    zetnsh New Member

    Good thought Till, I'll check that, though pretty sure that's not the case. At least it's one thing I can eliminate :)
     

Share This Page