Problem z dużą ilością spamu na vps -root mail

[daro2323 0]

witam
co chwilę zawalają mnie maile tego typu

 

 

Mail headers View all headers | View raw message
From Mail Delivery Subsystem
To postmaster@darex
Date 07/05/2013 11:19
Subject Postmaster notify: see transcript for details
Message contents

The original message was received at Tue, 7 May 2013 11:19:30 +0200
from localhost
with id r479JUSZ009627

----- The following addresses had permanent fatal errors -----

(reason: 550 5.1.1 : Recipient address rejected:
User unknown in local recipient table)

----- Transcript of session follows -----
... while talking to manabito-online.com.:
>>> DATA
<<< 550 5.1.1 : Recipient address rejected:
User unknown in local recipient table
550 5.1.1 ... User unknown
<<< 554 5.5.1 Error: no valid recipients

Failed delivery status
Final recipient dwightmacdonald@manabito-online.com
Reason for failure 550 5.1.1 : Recipient address rejected: User unknown in local recipient table
Remote mail server manabito-online.com
Reporting mail server darex






Mail headers View all headers | View raw message
From Mail Delivery Subsystem
To
Date 07/05/2013 11:19
Subject Returned mail: see transcript for details
Message contents

The original message was received at Tue, 7 May 2013 11:08:43 +0200
from 43.13.be.static.xlhost.com [209.190.19.67]

----- The following addresses had permanent fatal errors -----

(reason: 504 5.5.2 : Helo command rejected: need fully-qualified hostname)

(reason: 550-5.1.1 The email account that you tried to reach does not exist.
Please try)

(reason: 550 5.1.1 : Recipient address rejected: User unknown
in virtual mailbox table)

(reason: 550 5.1.1 ... : Recipient
address rejected: User unknown in local recipient table)

(reason: 550 Access denied - Invalid HELO name (See RFC2821 4.1.1.1))

(reason: 550 Invalid recipient (#5.1.1))

(reason: 550 5.1.1 : Recipient address rejected: User
unknown in virtual mailbox table)

(reason: 521 5.2.1 : (CON:B1) http://postmaster.info.aol.com/errors/554conb1.html)

(reason: 504 5.5.2 : Helo command rejected: need fully-qualified hostname)

(reason: 550 sorry, no mailbox here by that name. (#5.7.17)
)


(reason: 550 5.1.1 ... : Recipient address
rejected: User unknown in virtual mailbox table)

(reason: 554-srvmail3.embratel.com.br)

(reason: 504 5.5.2 : Helo command rejected: need fully-qualified hostname)

(reason: 550-5.7.1 [2a02:ee0:2:aaaa::878b:7ecb 12] Our system has detected
that this)

(reason: 550-5.7.1 [2a02:ee0:2:aaaa::878b:7ecb 12] Our system has detected
that this)

(reason: 550-5.7.1 [2a02:ee0:2:aaaa::878b:7ecb 12] Our system has detected
that this)

(reason: 550-5.7.1 [2a02:ee0:2:aaaa::878b:7ecb 12] Our system has detected
that this)


(reason: 550 Requested action not taken: mailbox unavailable)

(reason: 550 Requested action not taken: mailbox unavailable)

(reason: 550-5.7.1 [2a02:ee0:2:aaaa::878b:7ecb 12] Our system has detected
that this)

(reason: 550-5.7.1 [2a02:ee0:2:aaaa::878b:7ecb 12] Our system has detected
that this)

(reason: 550-5.7.1 [2a02:ee0:2:aaaa::878b:7ecb 12] Our system has detected
that this)

(reason: 550-5.7.1 [2a02:ee0:2:aaaa::878b:7ecb 12] Our system has detected
that this)

(reason: 504 5.5.2 : Helo command rejected: need fully-qualified hostname)

(reason: 504 5.5.2 : Helo command rejected: need fully-qualified hostname)

(reason: 550 sorry, no mailbox here by that name (#5.1.1))







(reason: 550 5.1.1 : Recipient address rejected: User unknown
in relay recipient table)

----- Transcript of session follows -----
... while talking to mx.abeu.com.br.:
>>> HELO darex
<<< 504 5.5.2 : Helo command rejected: need fully-qualified hostname
554 5.0.0 Service unavailable
... while talking to aspmx.l.google.com.:
>>> RCPT To:
<<< 550-5.1.1 The email account that you tried to reach does not exist. Please try
<<< 550-5.1.1 double-checking the recipient's email address for typos or
<<< 550-5.1.1 unnecessary spaces. Learn more at
<<< 550 5.1.1 http://support.google.com/mail/bin/answer.py?answer=6596 x48si30196420eey.258
- gsmtp
550 5.1.1 ... User unknown
... while talking to mx1.ajato.com.br.:
>>> DATA
<<< 550 5.1.1 : Recipient address rejected: User unknown in
virtual mailbox table
550 5.1.1 ... User unknown
<<< 554 5.5.1 Error: no valid recipients
... while talking to gaia2.cpd.ufv.br.:
>>> DATA
<<< 550 5.1.1 ... : Recipient address
rejected: User unknown in local recipient table
550 5.1.1 ... User unknown
<<< 503 5.0.0 Need RCPT (recipient)
... while talking to ams.com.br.:
>>> MAIL From: SIZE=1877 BODY=8BITMIME
<<< 550 Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
554 5.0.0 Service unavailable
... while talking to cluster1.us.messagelabs.com.:
>>> DATA
<<< 550 Invalid recipient (#5.1.1)
550 5.1.1 ... User unknown
<<< 503 RCPT first (#5.5.1)
... while talking to mx1.antares.com.br.:
>>> DATA
<<< 550 5.1.1 : Recipient address rejected: User unknown in
virtual mailbox table
550 5.1.1 ... User unknown
<<< 554 5.5.1 Error: no valid recipients
... while talking to mailin-03.mx.aol.com.:
>>> DATA
<<< 521 5.2.1 : (CON:B1) http://postmaster.info.aol.com/errors/554conb1.html
554 5.5.0 Remote protocol error
... while talking to mail.avis.com.br.:
>>> DATA
<<< 450 : Sender address rejected: unverified
address: Address verification in progress
... Deferred: 450 : Sender
address rejected: unverified address: Address verification in progress
<<< 554 Error: no valid recipients
>>> RSET
<<< 421 preproc.avis.com.br Error: too many errors
... while talking to mx3.bol.com.br.:
>>> DATA
<<< 450 4.7.1 : Client host rejected:
Try again later
... Deferred: 450 4.7.1 :
Client host rejected: Try again later
<<< 450 4.7.1 : Client host rejected:
Try again later
... Deferred: 450 4.7.1 :
Client host rejected: Try again later
<<< 554 5.5.1 Error: no valid recipients
451 4.4.1 reply: read error from brmail5.br-petrobras.com.br.
... while talking to mx.a.locaweb.com.br.:
>>> HELO darex
<<< 504 5.5.2 : Helo command rejected: need fully-qualified hostname
... while talking to mx.b.locaweb.com.br.:
>>> HELO darex
<<< 504 5.5.2 : Helo command rejected: need fully-qualified hostname
... while talking to mx.jk.locaweb.com.br.:
>>> HELO darex
<<< 504 5.5.2 : Helo command rejected: need fully-qualified hostname
554 5.0.0 Service unavailable
... while talking to mail.caixapostal.com.br.:
>>> DATA
<<< 550 sorry, no mailbox here by that name. (#5.7.17)
550 5.1.1 ... User unknown
<<< 503 RCPT first (#5.5.1)
550 5.1.2 ... Host unknown (Name server: cenpes.petrobras.com.br:
no data known)
... while talking to mx22.unodata.com.br.:
>>> DATA
<<< 550 5.1.1 ... : Recipient address rejected:
User unknown in virtual mailbox table
550 5.1.1 ... User unknown
<<< 503 5.0.0 Need RCPT (recipient)
... while talking to srvmail4.embratel.com.br.:
<<< 554-srvmail4.embratel.com.br
<<< 554 Your access to this mail system has been rejected due to the sending MTA's
poor reputation. If you believe that this failure is in error, please contact the
intended recipient via alternate means.
... while talking to srvmail3.embratel.com.br.:
<<< 554-srvmail3.embratel.com.br
<<< 554 Your access to this mail system has been rejected due to the sending MTA's
poor reputation. If you believe that this failure is in error, please contact the
intended recipient via alternate means.
554 5.0.0 Service unavailable
... while talking to mx.fnis.com.br.:
>>> DATA
<<< 504 5.5.2 : Helo command rejected: need fully-qualified hostname
554 5.0.0 Service unavailable
<<< 554 5.5.1 Error: no valid recipients
... while talking to gmail-smtp-in.l.google.com.:
>>> DATA
<<< 550-5.7.1 [2a02:ee0:2:aaaa::878b:7ecb 12] Our system has detected that this
<<< 550-5.7.1 message is likely unsolicited mail. To reduce the amount of spam sent
<<< 550-5.7.1 to Gmail, this message has been blocked. Please visit
<<< 550-5.7.1 http://support.google.com/mail/bin/answer.py?hl=en&answer=188131 for
<<< 550 5.7.1 more information. g47si33269625eem.225 - gsmtp
554 5.0.0 Service unavailable
554 5.0.0 Service unavailable
... while talking to mx4.hotmail.com.:
>>> DATA
<<< 550 Requested action not taken: mailbox unavailable
550 5.1.1 ... User unknown
<<< 550 Requested action not taken: mailbox unavailable
550 5.1.1 ... User unknown
... while talking to alt1.aspmx.l.google.com.:
>>> DATA
<<< 550-5.7.1 [2a02:ee0:2:aaaa::878b:7ecb 12] Our system has detected that this
<<< 550-5.7.1 message is likely unsolicited mail. To reduce the amount of spam sent
<<< 550-5.7.1 to Gmail, this message has been blocked. Please visit
<<< 550-5.7.1 http://support.google.com/mail/bin/answer.py?hl=en&answer=188131 for
<<< 550 5.7.1 more information. yg2si8879802bkb.196 - gsmtp
554 5.0.0 Service unavailable
... while talking to vip-us-br-mx.terra.com.:
>>> HELO darex
<<< 504 5.5.2 : Helo command rejected: need fully-qualified hostname
554 5.0.0 Service unavailable
... while talking to mail2.rionet.com.br.:
>>> DATA
<<< 550 sorry, no mailbox here by that name (#5.1.1)
550 5.1.1 ... User unknown
<<< 503 RCPT first (#5.5.1)
554 5.0.0 Service unavailable
... while talking to mx.uol.com.br.:
>>> DATA
<<< 450 4.7.1 : Client host rejected:
Try again later
... Deferred: 450 4.7.1 :
Client host rejected: Try again later
<<< 550 5.1.1 : Recipient address rejected: User unknown in relay
recipient table
550 5.1.1 ... User unknown
<<< 450 4.7.1 : Client host rejected:
Try again later
... Deferred: 450 4.7.1 :
Client host rejected: Try again later
<<< 450 4.7.1 : Client host rejected:
Try again later
... Deferred: 450 4.7.1 :
Client host rejected: Try again later
<<< 450 4.7.1 : Client host rejected:
Try again later
... Deferred: 450 4.7.1 :
Client host rejected: Try again later
<<< 450 4.7.1 : Client host rejected:
Try again later
... Deferred: 450 4.7.1 :
Client host rejected: Try again later
<<< 450 4.7.1 : Client host rejected:
Try again later
... Deferred: 450 4.7.1 :
Client host rejected: Try again later
<<< 554 5.5.1 Error: no valid recipients

 

 

w jeden dzień nawet 8MB tego gówna, dodaje w sendmailu ban na adresy ip z których przychodzą te maile ale to działa tylko na kilka dni i później znów to samo.
da się coś z tym zrobić?
z góry dzięki za odpowiedź

pozdrawiam

[tgx 575]

Najlepiej przestać rozsyłać spam to nie będą przychodziły zwrotki o niedostarczonej wiadomości.

 

Sprawdź skąd leci, przejrzyj logi, sprawdź co siedzi w kolejce i skąd jest tam wrzucane

[daro2323 0]

ja żadnego spamu nie wysyłam
zapłaciłem za konfigurację serwera sendmail

w logach mam coś takiego

 

 

May 7 12:48:23 darex sendmail[6150]: r47Al91O006126: to=<transferable@centroin.com.br>, delay=00:01:14, xdelay=00:00:18, mailer=esmtp, pri=1891641, relay=aspmx.l.google.com. [iPv6:2a00:1450:4013:c01::1b], dsn=5.1.1, stat=User unknown
May 7 12:48:23 darex sendmail[6123]: r47AkcWM006024: to=<topsoil@centroin.com.br>, delay=00:01:44, xdelay=00:00:04, mailer=esmtp, pri=1891655, relay=aspmx.l.google.com. [iPv6:2a00:1450:4013:c01::1b], dsn=5.1.1, stat=User unknown
May 7 12:48:23 darex sendmail[6214]: r47Am2pE006214: ruleset=check_rcpt, arg1=<riodejaneiro@colegioeverest.com.br>, relay=197-248-63-74.static.reverse.lstn.net [74.63.248.197] (may be forged), reject=550 5.7.1 <riodejaneiro@colegioeverest.com.br>... Relaying denied. IP name possibly forged [74.63.248.197]
May 7 12:48:23 darex sendmail[6214]: r47Am2pE006214: ruleset=check_rcpt, arg1=<riodejaneiro@cralmeida.com.br>, relay=197-248-63-74.static.reverse.lstn.net [74.63.248.197] (may be forged), reject=550 5.7.1 <riodejaneiro@cralmeida.com.br>... Relaying denied. IP name possibly forged [74.63.248.197]
May 7 12:48:24 darex sendmail[6214]: r47Am2pE006214: ruleset=check_rcpt, arg1=<riodejaneiro@ctviva.com.br>, relay=197-248-63-74.static.reverse.lstn.net [74.63.248.197] (may be forged), reject=550 5.7.1 <riodejaneiro@ctviva.com.br>... Relaying denied. IP name possibly forged [74.63.248.197]

 

wiadomość przykładowa wygląda tak:

 

 

Message contents

Desconfia do seu marido ou esposa?

Tem curiosidae de saber com quem ele ou ela conversa no facebook ou nos chats?

Não tem certeza se seu namorado ou namorada é fiel?

Vocę sabia que vocę pode descobrir MUITOS SEGREDOS atráves das conversas do teu parceiro
ou parceira?

Ou vocę pode querer monitorar o que seus filhos estão fazendo na internet.

Se vocę tem uma empresa pode monitorar o que seus funcionários fazem na hora do
trabalho na internet...

Enfim, este Sistema de Monitoramente espião 100% invisivel vai te deixar por dentro
de tudo que está acontecendo, descubra os SEGREDOS que teu parceiro ou parceira não
te conta.

Descubra as senhas do facebook, skype, msn e email que ela ou ele tem e não te passa.


Veja mais em: http://www.descubraagora.com/index.php?afiliado=6111








Atenciosamente,

Dayse Andrade
http://www.descubraagora.com/index.php?afiliado=6111




-----------------------
Este informativo é enviado de acordo com o "Guia de Boas Maneiras" para
e-mail marketing da ABEMD - Associaįão Brasileira de Marketing Direto.

Respeitamos a sua privacidade.

Caso não queira mais receber nossos informativos, acesse este link e cancele sua
inscriįão.

 

 

 

Edytowano Maj 7, 2013 przez daro2323 (zobacz historię edycji)

[tgx 575]

Sprawdź nagłówki przykładowej wiadomości z kolejki, będziesz miał więcej informacji, niestety nadal wygląda to na spam z Twojego serwera

[daro2323 0]

May 7 13:28:23 darex sendmail[9149]: r47B8gh4008291: to=<zen@brasilnet.com.br>, delay=00:19:39, xdelay=00:00:03, mailer=esmtp, pri=1981645, relay=smtpzin2.f1.k8.com.br. [187.73.32.183], dsn=4.7.1, stat=Deferred: 450 4.7.1 <zen@brasilnet.com.br>: Recipient address rejected: policy rejection: recipient quota exceeded

 

[regdos 1848]

To nie jest nagłówek wiadomości tylko wpis z logu.

Też stawiam na to, że ktoś sobie z Twojego serwera zrobił maszynkę do wysyłania spamu.