OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: ignore spam

lst_hoe01kwsoft.de
Date: Wed Dec 01 2004 - 08:43:33 CST

Zitat von Kaspars <kasparsos.lv>:

>
> Hi,
>
> I just set up postfix smtp server and getting full logs every second with:
> Dec 1 16:27:10 core postfix/smtpd[267]: NOQUEUE: reject: RCPT from
> TC222-156-21-135.adsl.dynamic.apol.com.tw[222.156.21.135]: 554
> <fanniexmailyahoo.com.tw>: Relay access denied;
> from=<7r7ms17.hinet.net> to=<fanniexmailyahoo.com.tw> proto=ESMTP
> helo=<199.221.181.188>
> Dec 1 16:27:10 core postfix/smtpd[267]: disconnect from
> TC222-156-21-135.adsl.dynamic.apol.com.tw[222.156.21.135]
> Dec 1 16:27:19 core postfix/smtpd[266]: connect from unknown[218.5.1.189]
> Dec 1 16:27:21 core postfix/smtpd[266]: NOQUEUE: reject: RCPT from
> unknown[218.5.1.189]: 554 <22455974.yahoo.com.tw>: Relay access denied;
> from=<222455974.ms22.hinet.net> to=<22455974.yahoo.com.tw> proto=ESMTP
> helo=<213.21.225.37>
> Dec 1 16:27:21 core postfix/smtpd[266]: lost connection after RCPT from
> unknown[218.5.1.189]
> Dec 1 16:27:21 core postfix/smtpd[266]: disconnect from
> unknown[218.5.1.189]
> Dec 1 16:27:26 core postfix/smtpd[267]: connect from unknown[218.5.1.189]
> Dec 1 16:27:30 core postfix/smtpd[267]: NOQUEUE: reject: RCPT from
> unknown[218.5.1.189]: 554 <beggms3.hinet.net>: Relay access denied;
> from=<8beggms28.hinet.net> to=<beggms3.hinet.net> proto=ESMTP
> helo=<213.21.225.37>
> Dec 1 16:27:30 core postfix/smtpd[267]: lost connection after RCPT from
> unknown[218.5.1.189]
> Dec 1 16:27:30 core postfix/smtpd[267]: disconnect from
> unknown[218.5.1.189]
>
> I getting lot of spammers from tw who are trying to send trought me spam
> every second...
> I can somehow to ignore maybe 10min not to bounce my computer?

You don't create any bounces. The only annoyance are the log entries and the
kept-busy smtpd daemons. Ignore them or firewall them of by iptables or similar
if they are getting to heavy from some IPs.

Regards

Andreas