OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Server accepting mails that are normally refused - hack?

From: Eddy Ilg (eddyfericom.net)
Date: Wed Oct 03 2007 - 13:01:57 CDT


Hi,

just wanted to say that deleting the mailq once (postsuper -d ALL)
solved the problem. We had problems with a full disk some time before
and it seems that as long as the disk was full, postfix accepted the
mails it should not accept.

Best regards

Eddy

Victor Duchovni schrieb:
> On Tue, Oct 02, 2007 at 12:04:29AM +0200, Eddy Ilg wrote:
>
>> And still the question arises why postfix accepts the mail initially:
>>
>> Received: from EXCHANGE (brmn-4db7427e.pool.einsundeins.de [77.183.66.126])
>> by mail.dextermedia.net (Postfix) with ESMTP id 8A8D38062DD
>> for <jensenchms34.hinet.net>; Sat, 29 Sep 2007 14:37:37 +0200
>> (CEST)
>
> Show logs.
>
>> This should not be. If I try to submit a mail for
>> jensenchms34.hinet.net via telnet it is rejected, so I can't figure
>> where the difference is.
>
> In your logs. Perhaps a login account on your server is weak. You have
> not posted "postconf -n" output, so it is difficult to guess where you
> went wrong if indeed relaying is possible via SMTP.
>