Big problem with spam..

Discussion in 'General' started by buliyo, Oct 10, 2013.

  1. buliyo

    buliyo New Member

    Hi, i have production server configured from forum tutorial.
    Debian7+Postfix+Nginx+ISPConfig3

    Everything work fine, but from 3 days i have big problem with spam..
    Prolem is sending spam from the server.
    How can i localize mistake in configuration?

    Example log:
    Code:
    Oct 10 12:12:18 prime postfix/error[17527]: 638C11287F1E: to=<tpitti@verizon.net>, relay=none, delay=0.14, delays=0.04/0.02/0/0.08, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: D88951287ACB: to=<carlmanning@verizon.net>, relay=none, delay=67800, delays=67800/0.02/0/0.01, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: D88951287ACB: to=<donovan.webb@verizon.net>, relay=none, delay=67800, delays=67800/0.02/0/0.02, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: D88951287ACB: to=<fillipx45@verizon.net>, relay=none, delay=67800, delays=67800/0.02/0/0.03, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: D88951287ACB: to=<green@verizon.net>, relay=none, delay=67800, delays=67800/0.02/0/0.04, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: D88951287ACB: to=<ironman1409@verizon.net>, relay=none, delay=67800, delays=67800/0.02/0/0.04, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: D88951287ACB: to=<jmlee@verizon.net>, relay=none, delay=67800, delays=67800/0.02/0/0.04, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: D88951287ACB: to=<louishelen@verizon.net>, relay=none, delay=67800, delays=67800/0.02/0/0.05, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: D88951287ACB: to=<privateer871@verizon.net>, relay=none, delay=67800, delays=67800/0.02/0/0.05, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: D88951287ACB: to=<rfranklin7@verizon.net>, relay=none, delay=67800, delays=67800/0.02/0/0.06, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: D88951287ACB: to=<rryman1@verizon.net>, relay=none, delay=67800, delays=67800/0.02/0/0.06, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: 6AC951287BC4: to=<genewaters@verizon.net>, relay=none, delay=19583, delays=19583/0.02/0/0.01, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: 6AC951287BC4: to=<lifetime17@verizon.net>, relay=none, delay=19583, delays=19583/0.02/0/0.02, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: 6AC951287BC4: to=<natystan@verizon.net>, relay=none, delay=19583, delays=19583/0.02/0/0.03, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: 6AC951287BC4: to=<roh54@verizon.net>, relay=none, delay=19583, delays=19583/0.02/0/0.04, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/error[18119]: 6AC951287BC4: to=<secarney@verizon.net>, relay=none, delay=19583, delays=19583/0.02/0/0.05, dsn=4.0.0, status=deferred (delivery temporarily suspended: host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:14 prime postfix/smtp[18133]: DE2F21287F11: to=<ebarrett@dotfoods.com>, relay=spamkiller.dotfoods.com[206.71.212.9]:25, delay=1177, delays=1176/0.12/0.57/0, dsn=4.7.1, status=deferred (host spamkiller.dotfoods.com[206.71.212.9] refused to talk to me: 450 4.7.1 Service temporarily unavailable; Client host [12.12.12.12] blocked using Trend Micro Email Reputation Service. Please see http://www.mail-abuse.com/cgi-bin/lookup?ip_address=12.12.12.12; Mail from 12.12.12.12 deferred using Trend Micro Email Reputation database. Please see <http://www.mail-abuse.com/cgi-bin/lookup?12.12.12.12>)
    Oct 10 12:16:42 prime postfix/smtp[17382]: 387E81287AAF: host smtp2.fastermac.net[69.64.140.26] refused to talk to me: 559-smtp2.fastermac.net 559 Connection refused as spam. If this is incorrect please submit a trouble ticket at http://eshop.macsales.com/Service/spamreports.cfm
    Oct 10 12:16:42 prime postfix/smtp[17382]: 387E81287AAF: to=<davidcrane@fastermac.net>, relay=smtp.fastermac.net[69.64.140.158]:25, delay=70016, delays=69988/27/1.6/0, dsn=4.0.0, status=deferred (host smtp.fastermac.net[69.64.140.158] refused to talk to me: 559-smtp.fastermac.net 559 Connection refused as spam. If this is incorrect please submit a trouble ticket at http://eshop.macsales.com/Service/spamreports.cfm)
    Oct 10 12:16:45 prime postfix/smtp[18191]: 7E49E1287F0E: to=<crubsj@verizon.net>, relay=relay.verizon.net[206.46.232.11]:25, delay=992, delays=962/30/0.32/0, dsn=4.0.0, status=deferred (host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:45 prime postfix/smtp[18191]: 7E49E1287F0E: to=<davisphilly11@verizon.net>, relay=relay.verizon.net[206.46.232.11]:25, delay=992, delays=962/30/0.32/0, dsn=4.0.0, status=deferred (host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:45 prime postfix/smtp[18191]: 7E49E1287F0E: to=<dlwood571@verizon.net>, relay=relay.verizon.net[206.46.232.11]:25, delay=992, delays=962/30/0.32/0, dsn=4.0.0, status=deferred (host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:45 prime postfix/smtp[18191]: 7E49E1287F0E: to=<ezdoesit1@verizon.net>, relay=relay.verizon.net[206.46.232.11]:25, delay=992, delays=962/30/0.32/0, dsn=4.0.0, status=deferred (host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:45 prime postfix/smtp[18191]: 7E49E1287F0E: to=<jschulter@verizon.net>, relay=relay.verizon.net[206.46.232.11]:25, delay=992, delays=962/30/0.32/0, dsn=4.0.0, status=deferred (host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:45 prime postfix/smtp[18191]: 7E49E1287F0E: to=<krakow2000@verizon.net>, relay=relay.verizon.net[206.46.232.11]:25, delay=992, delays=962/30/0.32/0, dsn=4.0.0, status=deferred (host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:45 prime postfix/smtp[18191]: 7E49E1287F0E: to=<lee-sz@verizon.net>, relay=relay.verizon.net[206.46.232.11]:25, delay=992, delays=962/30/0.32/0, dsn=4.0.0, status=deferred (host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:45 prime postfix/smtp[18191]: 7E49E1287F0E: to=<lienhard31@verizon.net>, relay=relay.verizon.net[206.46.232.11]:25, delay=992, delays=962/30/0.32/0, dsn=4.0.0, status=deferred (host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:45 prime postfix/smtp[18191]: 7E49E1287F0E: to=<madden52@verizon.net>, relay=relay.verizon.net[206.46.232.11]:25, delay=992, delays=962/30/0.32/0, dsn=4.0.0, status=deferred (host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    Oct 10 12:16:45 prime postfix/smtp[18191]: 7E49E1287F0E: to=<marciej@verizon.net>, relay=relay.verizon.net[206.46.232.11]:25, delay=992, delays=962/30/0.32/0, dsn=4.0.0, status=deferred (host relay.verizon.net[206.46.232.11] refused to talk to me: 571 Email from 12.12.12.12 is currently blocked by Verizon Online's anti-spam system. The email sender or Email Service Provider may visit http://www.verizon.net/whitelist and request removal of the block. 131010)
    

    I found the problem. Botnet bruteforced one mailbox.
    Do you have any solutions to monitor postqueue and blocking of dangerous box?
     
    Last edited: Oct 10, 2013

Share This Page