OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
spam to www.domain hangs in the mailq

From: Aleksander (aleksanderkrediidiinfo.ee)
Date: Mon Dec 04 2006 - 05:34:03 CST


Hi,

Postfix is NAT'ed, the server's real aadress is 192.168.111.4, the port
25 is DNATted to the mailserver from the firewall (213.180.27.226). The
mailserver is not an open relay.

local_recipient_maps checks for valid aadresses. In the mail queue I
have these kind of mails:

E379FEE35 35019 Wed Nov 29 14:19:38 ovxojbdimkasoft.com
(delivery temporarily suspended: connect to
krediidiinfo.ee[213.180.27.226]: Connection timed out)
                                          kasutajawww.krediidiinfo.ee

Mail destined to www.krediidiinfo.ee, not krediidiinfo.ee. Seems postfix
tries to connect to www.krediidiinfo.ee, which is itself, but due to NAT
it fails. mydestination includes krediidiinfo.ee, but not
www.krediidiinfo.ee.

It's definitely spam. But why does postfix try to relay it to itself?

The only reason this should work, seems to be that someone is trying to
send spam from 'mynetworks', but I doubt that. In that case I'd be in
various RBLs for a while now, I'm not.

What gives?

Thanks,
  Alex