postqueue

[Thomas Spuhler]

On Wednesday, May 13, 2015 05:04:33 PM Sruli Saurymper wrote:
> On 13/05/15 16:38, Thomas Spuhler wrote:
> > On Wednesday, May 13, 2015 04:12:57 PM Sruli Saurymper wrote:
> >> Hi All,
> >> 
> >> I have some mails stuck in my postqueue, I do not know where these mails
> >> come from, none of them are from my server, they seem like spam, can
> >> anyone help me / point me to solving where these emails come from and
> >> how to stop it?
> >> 
> >> Some Postqueue outputs -
> >> 
> >> -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
> >> 9E4CC18004852     4690 Thu May  7 16:25:18  MAILER-DAEMON
> >> (host mail.royalven.com[87.239.8.18] said: 454 4.7.1
> >> <n19u57u3.2714962 at royalven.com>: Relay access denied (in reply to RCPT
> >> TO command))
> >> n19u57u3.2714962 at royalven.com
> >> 
> >> 850A51800486C     4588 Fri May  8 10:14:24  MAILER-DAEMON
> >> 
> >>              (connect to anysource.com[69.172.201.208]:25: Connection
> >> 
> >> timed out)
> >> 
> >>                                            sjah63_94vjl at anysource.com
> >> 
> >> B684B1800484B     4678 Thu May  7 16:43:00  MAILER-DAEMON
> >> 
> >>               (connect to rro.onet.pl[213.180.148.148]:25: Connection
> >> 
> >> timed out)
> >> 
> >>                                            dxvvkpgj at rro.onet.pl
> >> 
> >> A92CE18004A1D     4567 Thu May  7 17:26:15  MAILER-DAEMON
> >> 
> >>                (connect to nokia.co.in[147.243.14.149]:25: Connection
> >> 
> >> timed out)
> >> 
> >>                                            compaq at nokia.co.in
> >> 
> >> -- 20 Kbytes in 4 Requests.
> >> -----
> >> -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
> >> C55791800486C     3003 Tue May 12 02:16:41  MAILER-DAEMON
> >> 
> >>                  (connect to dcmotor.net[66.193.38.80]:25: Connection
> >> 
> >> timed out)
> >> 
> >>                                            925835 at dcmotor.net
> >> 
> >> C6B2B18004869     3005 Tue May 12 02:16:46  MAILER-DAEMON
> >> 
> >>                  (connect to dcmotor.net[66.193.38.80]:25: Connection
> >> 
> >> timed out)
> >> 
> >>                                            419214 at dcmotor.net
> >> 
> >> D2CF318004A1D     3011 Tue May 12 02:17:36  MAILER-DAEMON
> >> 
> >>                  (connect to dcmotor.net[66.193.38.80]:25: Connection
> >> 
> >> timed out)
> >> 
> >>                                            187441 at dcmotor.net
> >> 
> >> 690B318004FE9     3037 Tue May 12 02:17:16  MAILER-DAEMON
> >> 
> >>                  (connect to dcmotor.net[66.193.38.80]:25: Connection
> >> 
> >> timed out)
> >> 
> >>                                            19687 at dcmotor.net
> >> 
> >> -- 12 Kbytes in 4 Requests.
> >> ----
> >> -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
> >> 3E0FC1800487F     3367 Wed May 13 11:40:39  MAILER-DAEMON
> >> 
> >>             (connect to mail.whitsoncm.com[66.27.53.230]:25: Connection
> >> 
> >> refused)
> >> MagdalenaPerkinsaiuh at mail.whitsoncm.com
> >> 
> >> 7CA5F18004852    33085 Wed May 13 15:19:36  MAILER-DAEMON
> >> (connect to vlan-burgas-56-76.comnet.bg[217.174.56.76]:25: Connection
> >> timed out)
> >> JocelynFullerotv at vlan-burgas-56-76.comnet.bg
> >> 
> >> -- 36 Kbytes in 2 Requests.
> >> ----
> >> 
> >> _______________________________________________
> >> users mailing list
> >> users at lists.kolab.org
> >> https://lists.kolab.org/mailman/listinfo/users
> > 
> > Whois is your helper
> > 
> > whois "IP address"
> 
> It doesn’t really matter to me who these IP's are, what matters is how
> they gt into my postfix queue!
> 
> > _______________________________________________
> > users mailing list
> > users at lists.kolab.org
> > https://lists.kolab.org/mailman/listinfo/users
> 
> _______________________________________________
> users mailing list
> users at lists.kolab.org
> https://lists.kolab.org/mailman/listinfo/users

OK, I think it does matter if you want to know what's going on. I suspect these are spammers and 
your postfix checks if these addresses respond to a call to post 25. If not they will be discarded 
after a preset time.

-- 
Best regards
Thomas Spuhler

All of my e-mails have a valid digital signature
ID 60114E63
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.kolab.org/pipermail/users/attachments/20150513/0ee3658e/attachment.sig>