OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Blacklisted on Verizon

From: Justin C. Le Grice (mailinglistslegrice.co.nz)
Date: Tue Nov 10 2009 - 17:33:12 CST


Chris Arnold wrote:
> Hello list! We are being blacklisted every few days from verizon. This
> is less important right now as I need to find out if/who is sending
> spam from the email server or if the server is an open relay. I am
> less inclined to think postfix (which is what we use) is an open
> relay. More inclined to think someone has gotten an account is sending
> spam out using the server. What is the best way to find out who/if an
> account is sending spam from the server?
> I am trying to gain access to the mail server as we speak but the
> password I have been given is not working so I can not provide you
> with the version of postfix or any logs at this moment.
Once you do get on, how about loading pflogsumm from
http://jimsun.linxnet.com/postfix_contrib.html

This will assist you in determining who is sending the most messages.

Note: there is a problem of messages being counted twice if you are
running Amavis-New spamassassin.

Ciao

Justin