Meu postfix enviando spam [duplicado]

1

Eu verifiquei o meu etc / log / mail.log e encontrei um arquivo enorme que contém muitas linhas como essas (cada segundo insere 20 linhas):

Jan 31 06:25:20 myservername postfix/smtp[15459]: 02ACF5FBC3: to=<[email protected]>, relay=mta5.am0.yahoodns.net[98.137.159.28]:25, delay=412553, delays=412501/50/1.6/0.13, dsn=4.7.0, status=deferred (host mta5.am0.yahoodns.net[98.137.159.28] said: 421 4.7.0 [TSS04] Messages from myServerIP temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/post$
Jan 31 06:25:20 myservername postfix/smtp[15459]: 02ACF5FBC3: to=<[email protected]>, relay=mta5.am0.yahoodns.net[98.137.159.28]:25, delay=412553, delays=412501/50/1.6/0.13, dsn=4.7.0, status=deferred (host mta5.am0.yahoodns.net[98.137.159.28] said: 421 4.7.0 [TSS04] Messages from myServerIP temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaste$
Jan 31 06:25:20 myservername postfix/smtp[15463]: 08B5359448: host mta6.am0.yahoodns.net[98.137.159.28] said: 421 4.7.0 [TSS04] Messages from myServerIP temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html (in reply to MAIL FROM command)
Jan 31 06:25:20 myservername postfix/smtp[15463]: 08B5359448: lost connection with mta6.am0.yahoodns.net[98.137.159.28] while sending RCPT TO
Jan 31 06:25:20 myservername postfix/smtp[15464]: 680715EDFD: host smtp5.opco.com[208.88.204.132] refused to talk to me: 554 5.7.1 You are not allowed to connect.
Jan 31 06:25:20 myservername postfix/smtp[15453]: 97AEE58388: host mx142.netapp.com[216.240.21.19] refused to talk to me: 554 mx142.netapp.com
  • Eu nunca enviei esses e-mails.
  • É possível que meu servidor tenha sido invadido?
  • Como posso definir isso apenas meu servidor (ip) pode enviar e-mail?
  • Eu verifiquei meus arquivos php e fecho qualquer função de correio do acionador possível.
  • Preciso do meu servidor que possa enviar e receber e-mails.

main.cf

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

readme_directory = no

# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_tls_security_level=may

smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
myhostname = MYDOMAIN.com
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = $myhostname localhost.$mydomain localhost $mydomain
relayhost =
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
inet_protocols = all

virtual_alias_domains = yooteam.com
virtual_alias_maps = hash:/etc/postfix/virtual
compatibility_level = 2
    
por Yaakov Swissa 31.01.2018 / 16:45

1 resposta

1

Eu não tenho a reputação de comentar, então vou colocá-lo aqui.

Você provavelmente tem uma configuração de retransmissão de e-mail aberta, o que significa que qualquer pessoa pode usar seu servidor para enviar e-mails: link

Postfix- open relay. Como configurar então não é?

    
por 31.01.2018 / 16:47