bison
1
Hi
I get 3-400 messages an hour, like this in the postfix mail Queue, that gets bigger and bigger. How can I stop this ???
all the queue content is NOT from our users…
EB66B1BCC8F9 2013/04/24 07:06 my@domain.com hozelhaynes@bellsouth.net 6.87 kB host gateway-f1.isp.att.net[204.127.217.16] refused to talk to me: 550-46.4.79.10 blocked by ldap:ou=rblmx,dc=att,dc=net 550 Error - Blocked for abuse. See http://att.net/blocks
EAFE91BCC2E1 2013/04/24 02:27 my@domain.com carliw@panasonic.com 6.87 kB connect to panasonic.com[210.226.40.70]:25: Connection timed out
regards
Bison
Eric
2
Howdy,
What you’d need to do is review the email headers in order to discover where the email is coming from.
It’s possible that a user on your server has an infected computer that is sending spam, for example. Or maybe someone’s password was compromised.
It’s also possible that someone broke into a website on your server, and is sending spam through that.
It should be possible to get some clues as to how the messages are being send by looking at the headers of the emails you’re seeing in your queue.
-Eric
bison
3
I ended up deleting the site. A script was causing the relay and spamming
Thanks for the help
regards
Bison