hello all since some days ago has become spam sending through postfix, and I get these errors in log warn anyone here knows a solution for the server is not an open question ikmij reley so how can there so much spam is sent. May 11 10:53:46 ns2 postfix/cleanup[3788]: warning: regexp map /etc/postfix/header_checks, line 2: ignoring unrecognized request May 11 10:53:46 ns2 postfix/cleanup[3788]: warning: regexp map /etc/postfix/header_checks, line 4: ignoring unrecognized request May 11 10:53:46 ns2 postfix/cleanup[3788]: warning: regexp map /etc/postfix/header_checks, line 6: ignoring unrecognized request May 11 10:53:46 ns2 postfix/cleanup[3788]: warning: regexp map /etc/postfix/mime_header_checks, line 2: ignoring unrecognized request May 11 10:53:47 ns2 postfix/cleanup[3793]: warning: regexp map /etc/postfix/header_checks, line 2: ignoring unrecognized request May 11 10:53:47 ns2 postfix/cleanup[3793]: warning: regexp map /etc/postfix/header_checks, line 4: ignoring unrecognized request May 11 10:53:47 ns2 postfix/cleanup[3793]: warning: regexp map /etc/postfix/header_checks, line 6: ignoring unrecognized request May 11 10:53:47 ns2 postfix/cleanup[3793]: warning: regexp map /etc/postfix/mime_header_checks, line 2: ignoring unrecognized request May 11 10:54:35 ns2 amavis[1585]: (01585-04-48) (!)FWD via SMTP: -> , 451 4.5.0 Bad resp. to MAIL FROM, id=01585-04-48, from MTA([127.0.0.1]:10025): 354 End data with . May 11 10:56:20 ns2 spamd[2118]: dns: sendto() failed: Operation not permitted at /usr/share/perl5/Mail/SpamAssassin/DnsResolver.pm line 395. May 11 10:56:39 ns2 postfix/cleanup[3893]: warning: regexp map /etc/postfix/header_checks, line 2: ignoring unrecognized request May 11 10:56:39 ns2 postfix/cleanup[3893]: warning: regexp map /etc/postfix/header_checks, line 4: ignoring unrecognized request May 11 10:56:39 ns2 postfix/cleanup[3893]: warning: regexp map /etc/postfix/header_checks, line 6: ignoring unrecognized request May 11 10:56:39 ns2 postfix/cleanup[3893]: warning: regexp map /etc/postfix/mime_header_checks, line 2: ignoring unrecognized request thanks michael
Maybe you have a vulnerable web application (contact form, etc.) that is abused by spammers. This guide might help you: http://www.howtoforge.com/how-to-log-emails-sent-with-phps-mail-function-to-detect-form-spam
hi Falko I did what you said, so I see no log in ISPConfig but that these logs You said you paid to see where do I deposit money that I would like to have solved this thanks to the logs warm log May 12 19:31:37 ns2 postfix/smtpd[12187]: warning: Illegal address syntax from localhost.localdomain[127.0.0.1] in MAIL command: May 12 19:31:37 ns2 amavis[4088]: (04088-17) (!)SEND via SMTP: -> ,[email protected] 501 5.1.7 Failed, id=04088-17, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax May 12 19:31:37 ns2 amavis[4088]: (04088-17) (!)FAILED to notify admin: 501 5.1.7 Failed, id=04088-17, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax May 12 19:33:46 ns2 postfix/smtp[12220]: warning: no MX host for ragingbull.com has a valid address record May 12 19:48:09 ns2 postfix/smtpd[12918]: warning: Illegal address syntax from localhost.localdomain[127.0.0.1] in MAIL command: May 12 19:48:09 ns2 amavis[5637]: (05637-16) (!)SEND via SMTP: -> ,[email protected] 501 5.1.7 Failed, id=05637-16, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax May 12 19:48:09 ns2 amavis[5637]: (05637-16) (!)FAILED to notify admin: 501 5.1.7 Failed, id=05637-16, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax May 12 19:52:17 ns2 postfix/smtpd[13047]: warning: Illegal address syntax from localhost.localdomain[127.0.0.1] in MAIL command: May 12 19:52:17 ns2 amavis[4088]: (04088-20) (!)SEND via SMTP: -> ,[email protected] 501 5.1.7 Failed, id=04088-20, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax May 12 19:52:17 ns2 amavis[4088]: (04088-20) (!)FAILED to notify admin: 501 5.1.7 Failed, id=04088-20, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax May 12 19:58:17 ns2 postfix/smtpd[13160]: warning: Illegal address syntax from localhost.localdomain[127.0.0.1] in MAIL command: May 12 19:58:17 ns2 amavis[13048]: (13048-01) (!)SEND via SMTP: -> ,[email protected] 501 5.1.7 Failed, id=13048-01, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax May 12 19:58:17 ns2 amavis[13048]: (13048-01) (!)FAILED to notify admin: 501 5.1.7 Failed, id=13048-01, from MTA([127.0.0.1]:10025): 501 5.1.7 Bad sender address syntax maillog May 12 20:00:00 ns2 postfix/smtp[13189]: 5A395232398: host mailrecv.ifrance.com[82.196.5.134] refused to talk to me: 450 Client host rejected: cannot find your hostname, [188.202.98.226] May 12 20:00:01 ns2 postfix/smtpd[13152]: connect from localhost.localdomain[127.0.0.1] May 12 20:00:01 ns2 postfix/smtpd[13152]: lost connection after CONNECT from localhost.localdomain[127.0.0.1] May 12 20:00:01 ns2 postfix/smtpd[13152]: disconnect from localhost.localdomain[127.0.0.1] May 12 20:00:01 ns2 pop3d: Connection, ip=[::ffff:127.0.0.1] May 12 20:00:01 ns2 pop3d: Disconnected, ip=[::ffff:127.0.0.1] May 12 20:00:01 ns2 imapd: Connection, ip=[::ffff:127.0.0.1] May 12 20:00:01 ns2 imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0 thanks michael
