Форум Сайтостроение Администрирование серверов

Спамят с моего SMTP

K
На сайте с 24.07.2009
Offline
8
karpiy
1128

В логах обнаружил такие записи 


Jul 23 12:26:33 bpu sendmail[28307]: o6M4E5NT003977: to=<stage@mcc.it>, delay=1+04:12:26, xdelay=00:00:13, mailer=esmtp, pri=3271045, relay=relay2.mcc.it. [217.148.96.178], dsn=4.0.0, stat=Deferred: Connection refused by relay2.mcc.it.

Jul 23 12:26:33 bpu sendmail[28307]: o6M49cQV026503: to=<sasha65@jumpy.it>, delay=1+04:16:53, xdelay=00:00:00, mailer=esmtp, pri=3271045, relay=mx02.jumpy.it., dsn=4.0.0, stat=Deferred: Connection timed out with mx02.jumpy.it.

Jul 23 12:26:33 bpu sendmail[28307]: o6M4IYWi014043: to=<under@bobcats.it>, delay=1+04:07:57, xdelay=00:00:00, mailer=esmtp, pri=3271045, relay=mailserver2.cassiopea.it., dsn=4.0.0, stat=Deferred: Connection refused by mailserver2.cassiopea.it.

Jul 23 12:26:40 bpu sendmail[28307]: o6M4IYWi014043: to=<under21@martinacalcioa5.it>, delay=1+04:08:04, xdelay=00:00:07, mailer=esmtp, pri=3271045, relay=martinacalcioa5.it. [62.80.127.189], dsn=4.0.0, stat=Deferred: Connection refused by martinacalcioa5.it.

Jul 23 12:26:46 bpu sendmail[28307]: o6M43gmF014022: to=<procopio@inrademoskopea.it>, delay=1+04:23:02, xdelay=00:00:06, mailer=esmtp, pri=3271045, relay=inrademoskopea.it. [82.98.86.172], dsn=4.0.0, stat=Deferred: Connection refused by inrademoskopea.it.

Jul 23 12:26:53 bpu sendmail[28307]: o6M43gmF014022: to=<procopi@ien.it>, delay=1+04:23:09, xdelay=00:00:07, mailer=esmtp, pri=3271045, relay=mail.ien.it. [193.204.114.133], dsn=4.0.0, stat=Deferred: Connection refused by mail.ien.it.

Jul 23 12:27:00 bpu sendmail[28307]: o6M4AJKb030418: to=<sdvvvg@rty.it>, delay=1+04:16:40, xdelay=00:00:06, mailer=esmtp, pri=3271045, relay=disabled.eurodns.com. [80.92.66.130], dsn=4.0.0, stat=Deferred: Connection refused by disabled.eurodns.com.

Jul 23 12:27:08 bpu sendmail[28307]: o6M47TuL023609: to=<romacent@edilnord.it>, delay=1+04:19:38, xdelay=00:00:06, mailer=esmtp, pri=3271045, relay=mail.edilnord.it. [85.25.146.60], dsn=4.0.0, stat=Deferred: Connection refused by mail.edilnord.it.

Jul 23 12:27:45 bpu sendmail[28307]: o6M47TuL023609: to=<romacentro@inail.it>, delay=1+04:20:15, xdelay=00:00:37, mailer=esmtp, pri=3271045, relay=prilms01-c.inail.it. [89.97.126.89], dsn=4.0.0, stat=Deferred: Connection refused by prilms01-c.inail.it.

Jul 23 12:27:52 bpu sendmail[28307]: o6M4KWbX021913: to=<virologia@ispave.it>, delay=1+04:07:18, xdelay=00:00:06, mailer=esmtp, pri=3271045, relay=mail.ispave.it. [81.73.87.5], dsn=4.0.0, stat=Deferred: Connection refused by mail.ispave.it.

Jul 23 12:27:52 bpu sendmail[28307]: o6M4KWbX021913: to=<virna86@jumpy.it>, delay=1+04:07:18, xdelay=00:00:00, mailer=esmtp, pri=3271045, relay=mx02.jumpy.it., dsn=4.0.0, stat=Deferred: Connection timed out with mx02.jumpy.it.

Jul 23 12:27:58 bpu sendmail[28307]: o6M4KWbX021913: to=<viroland@med.unibo.it>, delay=1+04:07:24, xdelay=00:00:06, mailer=esmtp, pri=3271045, relay=mx02.unibo.it. [137.204.24.59], dsn=4.0.0, stat=Deferred: Connection refused by mx02.unibo.it.

Jul 23 12:28:01 bpu sendmail[28307]: o6M42p9U013588: to=<postmaster@connet.it>, delay=1+04:25:06, xdelay=00:00:00, mailer=esmtp, pri=3271045, relay=disabled.eurodns.com., dsn=4.0.0, stat=Deferred: Connection refused by disabled.eurodns.com.

Jul 23 12:28:09 bpu sendmail[28307]: o6M42p9U013588: to=<postmaster@conot.pa.it>, delay=1+04:25:14, xdelay=00:00:06, mailer=esmtp, pri=3271045, relay=mail.conot.pa.it. [70.84.196.98], dsn=4.0.0, stat=Deferred: Connection refused by mail.conot.pa.it.

Jul 23 12:28:16 bpu sendmail[28307]: o6M42p9U013588: to=<postmaster@copin.it>, delay=1+04:25:21, xdelay=00:00:07, mailer=esmtp, pri=3271045, relay=mail.copin.it. [80.21.210.235], dsn=4.0.0, stat=Deferred: Connection refused by mail.copin.it.

Jul 23 12:28:23 bpu sendmail[28307]: o6M4AXrR031946: to=<segretarioile@milano.salesiani.it>, delay=1+04:17:48, xdelay=00:00:06, mailer=esmtp, pri=3271045, relay=little.mr-net.it. [212.131.136.8], dsn=4.0.0, stat=Deferred: Connection refused by little.mr-net.it.

Jul 23 12:28:36 bpu sendmail[28307]: o6M48Pkb024064: to=<s.meloni@consiglio.regione.toscana.it>, delay=1+04:20:10, xdelay=00:00:12, mailer=esmtp, pri=3271045, relay=mail.consiglio.regione.toscana.it. [159.213.100.251], dsn=4.0.0, stat=Deferred: Connection refused by mail.consiglio.regione.toscana.it.

Jul 23 12:28:46 bpu sendmail[28307]: o6M4dlGW028290: to=<residuiteatro@fastewebnet.it>, delay=1+03:48:58, xdelay=00:00:06, mailer=esmtp, pri=3271045, relay=fastewebnet.it. [62.80.127.187], dsn=4.0.0, stat=Deferred: Connection refused by fastewebnet.it.

Jul 23 12:28:53 bpu sendmail[28307]: o6M4dlGW028290: to=<resinaro@mojodo.it>, delay=1+03:49:05, xdelay=00:00:07, mailer=esmtp, pri=3271045, relay=mail.valeriotesei.com. [94.198.99.70], dsn=4.0.0, stat=Deferred: Connection refused by mail.valeriotesei.com.

Jul 23 12:28:53 bpu sendmail[28307]: o6M4DoE3003716: to=<sprktuawg@jumpy.it>, delay=1+04:15:02, xdelay=00:00:00, mailer=esmtp, pri=3361045, relay=mx02.jumpy.it., dsn=4.0.0, stat=Deferred: Connection timed out with mx02.jumpy.it.

Jul 23 12:28:54 bpu sendmail[28307]: o6M3rjjJ021897: to=<capello@deta.it>, delay=1+04:35:07, xdelay=00:00:00, mailer=esmtp, pri=3361045, relay=disabled.eurodns.com., dsn=4.0.0, stat=Deferred: Connection refused by disabled.eurodns.com.

Jul 23 12:29:00 bpu sendmail[28307]: o6M3rjjJ021897: to=<capello@ntt.it>, delay=1+04:35:13, xdelay=00:00:06, mailer=esmtp, pri=3361045, relay=ntt.it. [82.98.86.170], dsn=4.0.0, stat=Deferred: Connection refused by ntt.it.

Походу спамят, как можно это исправить?

M
На сайте с 01.12.2009
Offline
235
madoff
#1

нужно смотреть

Администратор Linux,Freebsd. построения крупных проектов.
K
На сайте с 24.07.2009
Offline
8
karpiy
#2
madoff:
нужно смотреть

Ну это понятно, вот только где?

M
На сайте с 14.01.2010
Offline
208
masterlan
#3

Ща madoff предложит платную услугу)

Нет свободных падений с высот, Но зато есть свобода раскрыть парашют. Куплю BTC-E code за Privat24 UAH. icq: 698- 375- 092
M
На сайте с 16.09.2009
Offline
278
myhand
#4
karpiy:
В логах обнаружил такие записи 

Jul 23 12:26:33 bpu sendmail[28307]: o6M4E5NT003977: to=<stage@mcc.it>, delay=1+04:12:26, xdelay=00:00:13, mailer=esmtp, pri=3271045, relay=relay2.mcc.it. [217.148.96.178], dsn=4.0.0, stat=Deferred: Connection refused by relay2.mcc.it.

...

Походу спамят, как можно это исправить?

Смотрим почтовую очередь - кто послал письмо с ID o6M4E5NT003977. Смотрим логи, если письмо ушло. Выясняем, что послал скорее всего апач, т.е. через дырку в каком-то скрипте. Смотрим логи апача за соответствующее время и выясняем через какой именно скрипт...

Абонементное сопровождение серверов (Debian) Отправить личное сообщение (), написать письмо ().
bugsmoran
На сайте с 18.02.2010
Offline
223
bugsmoran
#5
madoff:
нужно смотреть

Капитан Очевидность? :D

K
На сайте с 24.07.2009
Offline
8
karpiy
#6

В очереди для id qfo6M4ID0k013908 


V8

T1279772298

K1279880296

N31

P3541045

I0/23/260096110

B8BITMIME

MDeferred: Connection refused by ente.it.

Fw8s

$_pd95bc833.dip0.t-ipconnect.de [217.91.200.51]

$rESMTP

$sUser

${daemon_flags}

${if_addr}64.191.99.194

S<servizio_clienti@cartasi.it>

MDeferred: Connection refused by ente.it.

rRFC822; ufficioreclami@ente.it

RPFD:<ufficioreclami@ente.it>

H?P?Return-Path: <Ѓg>

H??Received: from User (pd95bc833.dip0.t-ipconnect.de [217.91.200.51])

	(authenticated bits=0)

	by bpu.su (8.13.8/8.13.8) with ESMTP id o6M4ID0k013908;

	Thu, 22 Jul 2010 08:18:18 +0400

H?M?Message-Id: <201007220418.o6M4ID0k013908@bpu.su>

H??From: "servizio_clienti@cartasi.it"<servizio_clienti@cartasi.it>

H??Subject: COMUNICAZIONE URGENTE

H??Date: Thu, 22 Jul 2010 06:15:56 +0200

H??MIME-Version: 1.0

H??Content-Type: text/html;

	charset="utf-8"

H??Content-Transfer-Encoding: 7bit

H??X-Priority: 1

H??X-MSMail-Priority: High

H??X-Mailer: Microsoft Outlook Express 6.00.2600.0000

H??X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

.
Raistlin
На сайте с 01.02.2010
Offline
247
Raistlin
#7

Похоже, вам администратор нужен. Будет быстрее и дешевле...

HostAce - Асы в своем деле (http://hostace.ru)

Авторизуйтесь или зарегистрируйтесь, чтобы оставить комментарий