1. Перевіряємо чи має наш поштовик запис PTR в DNS.
2. Утилітами trafshow та tcpdump нічого непобачив. Тільки замітив що на деяких компах TheBat дуже часто звертається до SMTP на серваку.
3. Дивимося чергу листів /var/spool/mqueue
багато листів такого вмісту
V6
T1343718937
K1343719156
N1
P1501715
MUser unknown
Fs
$_localhost [127.0.0.1]
$rSMTP
$sUser
${daemon_flags}
${if_addr}127.0.0.1
S<test123@skyeits.com>
rRFC822; pearleyoung@aol.com
RPFD:<pearleyoung@aol.com>
MDeferred: 421 mtain-dk03.r1000.mx.aol.com Service unavailable - try again later
rRFC822; pearn@aol.com
RPFD:<pearn@aol.com>
MDeferred: 421 4.7.0 [TS01] Messages from X.X.X.X temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
rRFC822; pearl_senior@yahoo.co.uk
RPFD:<pearl_senior@yahoo.co.uk>
rRFC822; pearl_patac@yahoo.com
RPFD:<pearl_patac@yahoo.com>
rRFC822; pearlangel_41@yahoo.com
RPFD:<pearlangel_41@yahoo.com>
rRFC822; pearleminent@yahoo.com
RPFD:<pearleminent@yahoo.com>
rRFC822; pearlgem60@yahoo.com
RPFD:<pearlgem60@yahoo.com>
rRFC822; pearlhan881@yahoo.com
RPFD:<pearlhan881@yahoo.com>
rRFC822; pearlie5043@yahoo.com
RPFD:<pearlie5043@yahoo.com>
rRFC822; pearliechildress@yahoo.com
RPFD:<pearliechildress@yahoo.com>
rRFC822; pearlinewray@yahoo.com
RPFD:<pearlinewray@yahoo.com>
rRFC822; pearlith2000@yahoo.com
RPFD:<pearlith2000@yahoo.com>
rRFC822; pearlmand52000@yahoo.com
RPFD:<pearlmand52000@yahoo.com>
rRFC822; pearlmtchl@yahoo.com
RPFD:<pearlmtchl@yahoo.com>
rRFC822; pearlmvillarosa@yahoo.com
RPFD:<pearlmvillarosa@yahoo.com>
rRFC822; pearlnecklace@yahoo.com
RPFD:<pearlnecklace@yahoo.com>
rRFC822; pearlnecklace_13@yahoo.com
RPFD:<pearlnecklace_13@yahoo.com>
rRFC822; pearlperkins@yahoo.com
RPFD:<pearlperkins@yahoo.com>
rRFC822; pearlpeterso79@yahoo.com
RPFD:<pearlpeterso79@yahoo.com>
rRFC822; pearls621@yahoo.com
RPFD:<pearls621@yahoo.com>
rRFC822; pearlseashells@yahoo.com
RPFD:<pearlseashells@yahoo.com>
rRFC822; pearlsw@yahoo.com
RPFD:<pearlsw@yahoo.com>
rRFC822; pearly_arenas@yahoo.com
RPFD:<pearly_arenas@yahoo.com>
rRFC822; pears_lp@yahoo.com
RPFD:<pears_lp@yahoo.com>
rRFC822; pearse100@yahoo.com
RPFD:<pearse100@yahoo.com>
rRFC822; pearson.jason1120@yahoo.com
RPFD:<pearson.jason1120@yahoo.com>
rRFC822; pearlbay@ymail.com
RPFD:<pearlbay@ymail.com>
MDeferred: 421 4.7.0 [TS01] Messages from X.X.X.X temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
rRFC822; pearliedickerson@ymail.com
RPFD:<pearliedickerson@ymail.com>
H?P?Return-Path: <│g>
H??Received: from User (localhost [127.0.0.1])
by toe.te.ua (8.12.11/8.12.11) with SMTP id q6V7FYAP014265;
Tue, 31 Jul 2012 10:15:37 +0300
H?M?Message-Id: <201207310715.q6V7FYAP014265@toe.te.ua>
H??Reply-To: <wilsonsang1@aol.com>
H??From: "Mr. Wilson Sang"<test123@skyeits.com>
H??Subject: CLAIM
H??Date: Tue, 31 Jul 2012 00:17:11 -0700
H??MIME-Version: 1.0
H??Content-Type: text/html;
charset="Windows-1250"
H??Content-Transfer-Encoding: 7bit
H??X-Priority: 3
H??X-MSMail-Priority: Normal
H??X-Mailer: Microsoft Outlook Express 6.00.2600.0000
H??X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
4. Шукаємо в логах /val/log/maillog домен skyeits.com.
...relay=email.skyeits.com [61.12.110.147]...
5. Для початку прописуємо в /etc//mail/access
skyeits.com ERROR:550:Relay denied
2. Утилітами trafshow та tcpdump нічого непобачив. Тільки замітив що на деяких компах TheBat дуже часто звертається до SMTP на серваку.
3. Дивимося чергу листів /var/spool/mqueue
багато листів такого вмісту
V6
T1343718937
K1343719156
N1
P1501715
MUser unknown
Fs
$_localhost [127.0.0.1]
$rSMTP
$sUser
${daemon_flags}
${if_addr}127.0.0.1
S<test123@skyeits.com>
rRFC822; pearleyoung@aol.com
RPFD:<pearleyoung@aol.com>
MDeferred: 421 mtain-dk03.r1000.mx.aol.com Service unavailable - try again later
rRFC822; pearn@aol.com
RPFD:<pearn@aol.com>
MDeferred: 421 4.7.0 [TS01] Messages from X.X.X.X temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
rRFC822; pearl_senior@yahoo.co.uk
RPFD:<pearl_senior@yahoo.co.uk>
rRFC822; pearl_patac@yahoo.com
RPFD:<pearl_patac@yahoo.com>
rRFC822; pearlangel_41@yahoo.com
RPFD:<pearlangel_41@yahoo.com>
rRFC822; pearleminent@yahoo.com
RPFD:<pearleminent@yahoo.com>
rRFC822; pearlgem60@yahoo.com
RPFD:<pearlgem60@yahoo.com>
rRFC822; pearlhan881@yahoo.com
RPFD:<pearlhan881@yahoo.com>
rRFC822; pearlie5043@yahoo.com
RPFD:<pearlie5043@yahoo.com>
rRFC822; pearliechildress@yahoo.com
RPFD:<pearliechildress@yahoo.com>
rRFC822; pearlinewray@yahoo.com
RPFD:<pearlinewray@yahoo.com>
rRFC822; pearlith2000@yahoo.com
RPFD:<pearlith2000@yahoo.com>
rRFC822; pearlmand52000@yahoo.com
RPFD:<pearlmand52000@yahoo.com>
rRFC822; pearlmtchl@yahoo.com
RPFD:<pearlmtchl@yahoo.com>
rRFC822; pearlmvillarosa@yahoo.com
RPFD:<pearlmvillarosa@yahoo.com>
rRFC822; pearlnecklace@yahoo.com
RPFD:<pearlnecklace@yahoo.com>
rRFC822; pearlnecklace_13@yahoo.com
RPFD:<pearlnecklace_13@yahoo.com>
rRFC822; pearlperkins@yahoo.com
RPFD:<pearlperkins@yahoo.com>
rRFC822; pearlpeterso79@yahoo.com
RPFD:<pearlpeterso79@yahoo.com>
rRFC822; pearls621@yahoo.com
RPFD:<pearls621@yahoo.com>
rRFC822; pearlseashells@yahoo.com
RPFD:<pearlseashells@yahoo.com>
rRFC822; pearlsw@yahoo.com
RPFD:<pearlsw@yahoo.com>
rRFC822; pearly_arenas@yahoo.com
RPFD:<pearly_arenas@yahoo.com>
rRFC822; pears_lp@yahoo.com
RPFD:<pears_lp@yahoo.com>
rRFC822; pearse100@yahoo.com
RPFD:<pearse100@yahoo.com>
rRFC822; pearson.jason1120@yahoo.com
RPFD:<pearson.jason1120@yahoo.com>
rRFC822; pearlbay@ymail.com
RPFD:<pearlbay@ymail.com>
MDeferred: 421 4.7.0 [TS01] Messages from X.X.X.X temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
rRFC822; pearliedickerson@ymail.com
RPFD:<pearliedickerson@ymail.com>
H?P?Return-Path: <│g>
H??Received: from User (localhost [127.0.0.1])
by toe.te.ua (8.12.11/8.12.11) with SMTP id q6V7FYAP014265;
Tue, 31 Jul 2012 10:15:37 +0300
H?M?Message-Id: <201207310715.q6V7FYAP014265@toe.te.ua>
H??Reply-To: <wilsonsang1@aol.com>
H??From: "Mr. Wilson Sang"<test123@skyeits.com>
H??Subject: CLAIM
H??Date: Tue, 31 Jul 2012 00:17:11 -0700
H??MIME-Version: 1.0
H??Content-Type: text/html;
charset="Windows-1250"
H??Content-Transfer-Encoding: 7bit
H??X-Priority: 3
H??X-MSMail-Priority: Normal
H??X-Mailer: Microsoft Outlook Express 6.00.2600.0000
H??X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
4. Шукаємо в логах /val/log/maillog домен skyeits.com.
...relay=email.skyeits.com [61.12.110.147]...
5. Для початку прописуємо в /etc//mail/access
skyeits.com ERROR:550:Relay denied
Немає коментарів:
Дописати коментар