Spam Use My server (Postfix)

Discussion in 'Server Operation' started by ewkilian, May 12, 2020.

  1. ewkilian

    ewkilian Member

    Hi,
    Can you help me.
    A lot of Spam go out from my server :
    Code:
    May 12 12:36:19 sd-88574 postfix/smtps/smtpd[29992]: warning: hostname client.yota.ru does not resolve to address 188.162.199.93: Name or service not known
    May 12 12:36:19 sd-88574 postfix/smtps/smtpd[30176]: warning: Message delivery request rate limit exceeded: 310 from unknown[188.187.197.208] for service smtps
    May 12 12:36:19 sd-88574 postfix/smtps/smtpd[30280]: warning: hostname client.yota.ru does not resolve to address 188.162.43.21: Name or service not known
    May 12 12:36:19 sd-88574 postfix/smtps/smtpd[29975]: warning: Message delivery request rate limit exceeded: 311 from unknown[188.187.197.208] for service smtps
    May 12 12:36:19 sd-88574 postfix/smtps/smtpd[29072]: warning: unknown[78.128.113.100]: SASL PLAIN authentication failed:
    May 12 12:36:19 sd-88574 postfix/smtps/smtpd[29899]: warning: Message delivery request rate limit exceeded: 312 from unknown[188.187.197.208] for service smtps
    May 12 12:36:19 sd-88574 postfix/smtps/smtpd[30017]: warning: Message delivery request rate limit exceeded: 313 from unknown[188.187.197.208] for service smtps
    May 12 12:36:19 sd-88574 postfix/smtps/smtpd[29974]: warning: hostname dynamicip-197-187-188-208.pppoe.yola.ertelecom.ru does not resolve to address 188.187.197.208: Name or service not known
    May 12 12:36:19 sd-88574 postfix/smtps/smtpd[30182]: warning: hostname dynamicip-197-187-188-208.pppoe.yola.ertelecom.ru does not resolve to address 188.187.197.208: Name or service not known
    May 12 12:36:19 sd-88574 postfix/smtps/smtpd[30271]: warning: hostname dynamicip-197-187-188-208.pppoe.yola.ertelecom.ru does not resolve to address 188.187.197.208: Name or service not known
    May 12 12:36:19 sd-88574 postfix/smtps/smtpd[29975]: warning: hostname dynamicip-197-187-188-208.pppoe.yola.ertelecom.ru does not resolve to address 188.187.197.208: Name or service not known
    May 12 12:36:19 sd-88574 postfix/smtps/smtpd[30022]: warning: Message delivery request rate limit exceeded: 314 from unknown[188.187.197.208] for service smtps
    Now at the moment I have Stop PostFix.
    I such the origin of this Attak. Can you help me to stop this Spam ?
    Thank you very mutch
     
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    I think those lines you show are mail being received. Are you sure your server is sending spam?
    Useful commands, read man page before using
    Code:
    mailq
    
    tail -f /var/log/mail.log
    
    
    There are existing discussion threads on this forum about spam and recovering from spam.
    PS You make no mention what Operating system you have, nor what version Postfix.
     
  3. ewkilian

    ewkilian Member

    I have found (I think) the Email address account (with the log), Have change the Password and now I think et hope that the spam is Stop. (nothing in the queue)
    Debian 8.10 and postfix 2.11.3.
    I think that I must Upgrade all OS and software
     

Share This Page