atom feed7 messages in net.sourceforge.lists.courier-users[courier-users] Is my server a spam s...
FromSent OnAttachments
地藏之孤臣Sep 1, 2008 5:24 pm 
Sam VarshavchikSep 1, 2008 7:26 pm 
地藏之孤臣Sep 1, 2008 7:39 pm 
Mike EgglestonSep 2, 2008 4:21 am 
地藏之孤臣Sep 2, 2008 6:59 pm 
地藏之孤臣Sep 2, 2008 7:05 pm 
Jerry AmundsonSep 2, 2008 7:09 pm 
Subject:[courier-users] Is my server a spam sender? help me please!
From:地藏之孤臣 (9990@qq.com)
Date:Sep 1, 2008 5:24:01 pm
List:net.sourceforge.lists.courier-users

Hello everyone: I'm a newbie to courier mail server, I found many many lines in maillog like
these, is it right?

Aug 29 09:22:31 www courierd:
started,id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,module=esmtp,host=yahoo.com,addr=secu@moneybookers.com>,module=esmtp,host=yahoo.com,addr=<castle1473@> Aug 29 09:22:31 www courierd:
started,id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,module=esmtp,host=yahoo.com,addr=secu@moneybookers.com>,module=esmtp,host=yahoo.com,addr=<cath@yahoo.com> Aug 29 09:22:31 www courierd:
started,id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,module=esmtp,host=yahoo.es,addr=secu@moneybookers.com>,module=esmtp,host=yahoo.es,addr=<cata@yahoo.es> Aug 29 09:22:31 www courierd:
started,id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,module=esmtp,host=yahoo.es,addr=secu@moneybookers.com>,module=esmtp,host=yahoo.es,addr=<cato@yahoo.es> Aug 29 09:22:31 www courierd:
started,id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,module=esmtp,host=yahoo.fr,addr=secu@moneybookers.com>,module=esmtp,host=yahoo.fr,addr=<cati@yahoo.fr> Aug 29 09:22:31 www courierd: Waiting. shutdown time=none, wakeup time=none,
queuedelivering=1, inprogress=3 Aug 29 09:22:32 www courierd: Waiting. shutdown time=none, wakeup time=none,
queuedelivering=1, inprogress=2 Aug 29 09:22:33 www courieresmtp:
id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,addr=secu@moneybookers.com>,addr=<cast@yahoo.com>:
554 Message not allowed - UP Email not accepted for policy reasons. Please
visit http://help.yahoo.com/help/us/mail/defer/defer... Aug 29 09:22:33 www courieresmtp:
id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,addr=secu@moneybookers.com>,addr=<cath@yahoo.com>:
554 Message not allowed - UP Email not accepted for policy reasons. Please
visit http://help.yahoo.com/help/us/mail/defer/defer... Aug 29 09:22:33 www courieresmtp:
id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,addr=,status CTRL + 单击以下链接"
href="#">secu@moneybookers.com>,addr=<cast@yahoo.com>,status: failure Aug 29 09:22:33 www courieresmtp:
id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,addr=,status CTRL + 单击以下链接"
href="#">secu@moneybookers.com>,addr=<cath@yahoo.com>,status: failure Aug 29 09:22:33 www courierd: Waiting. shutdown time=none, wakeup time=none,
queuedelivering=1, inprogress=1 Aug 29 09:22:34 www courieresmtp:
id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,addr=secu@moneybookers.com>,addr=<cati@yahoo.fr>:
554 Message not allowed - UP Email not accepted for policy reasons. Please
visit http://help.yahoo.com/help/us/mail/defer/defer... Aug 29 09:22:34 www courieresmtp:
id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,addr=,status CTRL + 单击以下链接"
href="#">secu@moneybookers.com>,addr=<cati@yahoo.fr>,status:
failure Aug 29 09:22:34 www courierd:
completed,id=00000000000A801F.0000000048B65D1C.00002E8E Aug 29 09:22:34 www courierd: Waiting. shutdown time=Fri Aug 29 10:00:28 2008,
wakeup time=Fri Aug 29 09:27:34 2008, queuedelivering=1, inprogress=0 Aug 29 09:27:34 www courierd:
started,id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,module=esmtp,host=yahoo.es,addr=secu@moneybookers.com>,module=esmtp,host=yahoo.es,addr=<cata@yahoo.es> Aug 29 09:27:34 www courierd:
started,id=00000000000A801F.0000000048B65D1C.00002E8E,from=<secu@moneybookers.com>,module=esmtp,host=yahoo.es,addr=<cato@yahoo.es> ialo@yahoo.es>: 451 VS5-MF Excessive unknown recipients - possible Open
Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.4.5) secu... Aug 29 07:17:30 www courieresmtp:
id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,addr=,status CTRL + 单击以下链接"
href="#">secu@moneybookers.com>,addr=<cata@yahoo.es>,status:
deferred Aug 29 07:17:30 www courieresmtp:
id=00000000000A801F.0000000048B65D1C.00002E8E,from=<,addr=secu@moneybookers.com>,addr=<cato@yahoo.es>:
451 VS5-MF Excessive unknown recipients - possible Open Relay
http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.4.5) secu... Aug 29 07:17:30 www courieresmtp:
id=00000000000A801F.0000000048B65D1C.00002E8E,from=<secu@moneybookers.com>,addr=<cato@yahoo.es>,status:
deferred Aug 29 07:17:30 www courierd: Waiting. shutdown time=none, wakeup time=none,
queuedelivering=1, inprogress=1 Aug 29 07:17:30 www courieresmtp:
id=00000000000A801F.0000000048B65D1C.00002E8E,from=<secu@moneybookers.com>,addr=<cati@yahoo.fr>:
451 VS5-MF Excessive unknown recipients - possible Open Relay
http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.4.5) secu... Aug 29 07:17:30 www courieresmtp:
id=00000000000A801F.0000000048B65D1C.00002E8E,from=<secu@moneybookers.com>,addr=<cati@yahoo.fr>,status:
deferred Aug 29 07:17:30 www courierd:
completed,id=00000000000A801F.0000000048B65D1C.00002E8E

I'd enabled SMTP_AUTH in esmtpd and tested it worked for me. I only enabled one
line 127.0.0.1 allow,RELAYCLINET in my smtpaccess/default and run
makesmtpaccess. I think that there have only 2 messages the server will relay , one is from my
server by authenticated user, another is which to my locals and hosteddomains,
but why from secu@moneybookers.com to yahoo.com enter my mail queue?

Messages given by logwatch

because 450 4.2.0 <supp@heimat.it>: Recipient address rejected:
Greylisted, see http://postgrey.schweikert.ch/help/heimat.it.html - 1 Time From secu@moneybookers.com - 1 Time To supp@heimat.it - 1 Time because 451 VS5-MF Excessive unknown recipients - possible Open Relay
http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.4.5) secu... - 680
Times From secu@moneybookers.com - 680 Times To cast@yahoo.com - 8 Times To cata@yahoo.es - 5 Times To cath@yahoo.ca - 3 Times To cath@yahoo.com - 8 Times To cati@yahoo.fr - 4 Times To cato@yahoo.es - 5 Times To cutt@yahoo.com - 3 Times To cutt@yahoo.com - 3 Times To cutt@yahoo.com - 3 Times To cutt@yahoo.com - 3 Times To cutt@yahoo.com - 3 Times To cutt@yahoo.com - 3 Times To cutt@yahoo.com - 3 Times To cutt@yahoo.com - 3 Times To cutt@yahoo.com - 3 Times To cutt@yahoo.com - 3 Times To dain@yahoo.com - 3 Times To dain@yahoo.com - 3 Times To dai@yahoo.com - 3 Times To dain@yahoo.com - 3 Times To dain@yahoo.com - 3 Times To dain@yahoo.com - 3 Times To dain@yahoo.com - 3 Times To dain@yahoo.com - 3 Times To dain@yahoo.com - 3 Times To dai@yahoo.com - 3 Times To davi@btinternet.com - 2 Times To dere@yahoo.com - 2 Times To trem@yahoo.com - 1 Time To trem@yahoo.com - 1 Time To trem@yahoo.com - 1 Time To trem@yahoo.com - 1 Time To trem@yahoo.com - 1 Time To trem@yahoo.com - 1 Time To trem@yahoo.com - 1 Time To yaju@yahoo.com - 3 Times because Connection reset by peer - 2 Times From secu@moneybookers.com - 2 Times To ya@trellis-photonics.com - 2 Times because Connection timed out - 12 Times From secu@moneybookers.com - 12 Times To yai@vista.com - 6 Times To ya@xxxxxxxxx.com - 6 Times because DNS lookup failed. - 6 Times From secu@moneybookers.com - 6 Times To supp@gradunet.co.uk - 6 Times

Failed delivery attempts: 182 Times

because 00000000000A8032.0000000048B5E507.000024A1 - 1 Time From secu@moneybookers.com - 1 Time To lina@yahoo.com - 1 Time

because 00000000000A805C.0000000048B5E926.0000252B - 10 Times From secu@moneybookers.com - 10 Times To cutt@yahoo.com - 1 Time To cutt@yahoo.com - 1 Time To cutt@yahoo.com - 1 Time To cutt@yahoo.com - 1 Time To cutt@yahoo.com - 1 Time To cutt@yahoo.com - 1 Time To cutt@yahoo.com - 1 Time To cutt@yahoo.com - 1 Time To cutt@yahoo.com - 1 Time To cutt@yahoo.com - 1 Time

because 550 5.1.1 <davi@vuw.ac.nz>... User unknown - 1 Time From secu@moneybookers.com - 1 Time To davi@vuw.ac.nz - 1 Time

because 550 5.1.1 <davi@cox.net> recipient rejected - 1 Time From secu@moneybookers.com - 1 Time To davi@cox.net - 1 Time

because 550 5.7.1 Message rejected as spam by Content Filtering. - 1 Time From secu@moneybookers.com - 1 Time To yair@aternity.com - 1 Time

because 550 550 Dynamic/zombied/spam IPs blocked. Write
bloc@abuse.earthlink.net - 1 Time From secu@moneybookers.com - 1 Time To lina@earthlink.net - 1 Time

because 550 <jean@engineer.com>: User unknown - 1 Time From secu@moneybookers.com - 1 Time To jean@engineer.com - 1 Time

because 550 <y-ak@uunet.uu.net>... User unknown - 1 Time From secu@moneybookers.com - 1 Time To y-ak@uunet.uu.net - 1 Time

because 550 Requested action not taken: mailbox unavailable - 1 Time From secu@moneybookers.com - 1 Time To cast@hotmail.fr - 1 Time

because 550 [IP:218.61.0.71] Twoj adres IP znajduje sie na czarnej liscie /
your IP is blacklisted - 1 Time From secu@moneybookers.com - 1 Time To lin@wp.pl - 1 Time

because 553 Dynamic pool 218.61.0.15.
<http://unblock.secureserver.net/?ip=218.61.0.*> - 2 Times From secu@moneybookers.com - 2 Times To grey@pandavista.com - 1 Time To supp@godaddy.com - 1 Time

because 553 information. (#5.7.1) - 1 Time From secu@moneybookers.com - 1 Time To linc@contact-energy.co.nz - 1 Time

because 554 Connecting IP: 218.61.0.71. - 1 Time From secu@moneybookers.com - 1 Time To lin@aol.com - 1 Time

because 554 5.7.1 Forbidden for policy reasons - 1 Time From secu@moneybookers.com - 1 Time To supp@hitekgear.com - 1 Time

because 554 Message not allowed - UP Email not accepted for policy reasons.
Please visit http://help.yahoo.com/help/us/mail/defer/defer... - 1 Time From secu@moneybookers.com - 1 Time To cath@yahoo.ca - 1 Time