OVH Community, your new community space.

spam??


Gnoll
11.06.2009, 15.06
MAIL abusare delle MAIL va a finire che entri in blacklist, ti consiglio di non far usare la funzione mail agli utenti, anche perchè se arriva una mail all'abuse di ovh la colpa ricade su di te e non sugli utenti del tuo sito.

jos
24.05.2009, 17.23
si ma infatti questo chiedevo, se qualche utente registrato al sito sta abusando della funzione mail() per fare spam e vorrei limitare in qualche modo le connessioni uscenti delle mail...

bago
24.05.2009, 17.05
A me sembra che quelli siano log di email che escono dal tuo server.
Il server di imajonline.com ti sta in qualche modo bloccando come spammer....

In generale comunque sono email uscenti.. controlla la coda (con sendmail è mailq, con postfix non ti so dire)...

jos
24.05.2009, 16.37
Salve ho letto questo dai log:

May 24 17:40:02 postfix/smtpd[17117]: connect from localhost.localdomain[127.0.0.1]
May 24 17:40:02 postfix/smtpd[17117]: disconnect from localhost.localdomain[127.0.0.1]
May 24 17:40:22 postfix/anvil[14937]: statistics: max connection rate 1/60s for (smtp:72.35.23.23) at May 24 17:36:13
May 24 17:40:22 postfix/anvil[14937]: statistics: max connection count 1 for (smtp:72.35.23.23) at May 24 17:36:13
May 24 17:40:22 postfix/anvil[14937]: statistics: max cache size 1 at May 24 17:36:13
May 24 17:40:55 postfix/qmgr[3519]: 78943550B18: from=, size=590, nrcpt=1 (queue active)
May 24 17:40:55 postfix/qmgr[3519]: 57AD3550B09: from=, size=587, nrcpt=1 (queue active)
May 24 17:40:55 postfix/qmgr[3519]: F17FB550ADC: from=, size=583, nrcpt=1 (queue active)
May 24 17:40:55 postfix/qmgr[3519]: CB4B6550B21: from=, size=569, nrcpt=1 (queue active)
May 24 17:40:55 postfix/qmgr[3519]: C4329550ADD: from=, size=604, nrcpt=1 (queue active)
May 24 17:40:55 postfix/qmgr[3519]: CED4B550B0D: from=, size=613, nrcpt=1 (queue active)
May 24 17:40:55 postfix/qmgr[3519]: C336C550B25: from=, size=578, nrcpt=1 (queue active)
May 24 17:40:55 postfix/qmgr[3519]: C4D28550B1A: from=, size=650, nrcpt=1 (queue active)
May 24 17:40:55 postfix/qmgr[3519]: C5C72550AEB: from=, size=603, nrcpt=1 (queue active)
May 24 17:40:55 postfix/smtp[17415]: connect to ionia.net[69.214.80.2]:25: No route to host
May 24 17:40:55 postfix/smtp[17416]: C4329550ADD: enabling PIX workarounds: disable_esmtp delay_dotcrlf for mail.imajonline.com[88.248.157.162]:25
May 24 17:40:55 postfix/smtp[17415]: CB4B6550B21: to=, relay=none, delay=8752, delays=8752/0.01/0.12/0, dsn=4.4.1, status=deferred (connect to ionia.net[69.214.80.2]:25: No route to host)
May 24 17:40:55 postfix/smtp[17416]: C4329550ADD: to=, relay=mail.imajonline.com[88.248.157.162]:25, delay=29627, delays=29627/0.01/0.23/0.22, dsn=4.0.0, status=deferred (host mail.imajonline.com[88.248.157.162] said: 421 4.0.0 Intrusion prevention active for [94.23.196.133] (in reply to RCPT TO command))
May 24 17:40:56 postfix/smtp[17414]: connect to extmail.optusnet.com.au[211.29.133.14]:25: Connection refused
May 24 17:40:56 postfix/smtp[17414]: F17FB550ADC: to=, relay=none, delay=71774, delays=71774/0.01/0.64/0, dsn=4.4.1, status=deferred (connect to extmail.optusnet.com.au[211.29.133.14]:25: Connection refused)
May 24 17:41:01 /USR/SBIN/CRON[17423]: (root) CMD (/usr/local/rtm/bin/rtm 56 > /dev/null 2> /dev/null)
May 24 17:41:25 postfix/smtp[17412]: connect to cornellpetsco.com[66.246.235.42]:25: Connection timed out
May 24 17:41:25 postfix/smtp[17413]: connect to mx1.home.com[10.42.23.11]:25: Connection timed out
May 24 17:41:25 postfix/smtp[17419]: connect to mx1.home.com[10.42.23.11]:25: Connection timed out
May 24 17:41:25 postfix/smtp[17418]: connect to mx1.home.com[10.42.23.11]:25: Connection timed out
May 24 17:41:25 postfix/smtp[17420]: connect to mx1.home.com[10.42.23.11]:25: Connection timed out
May 24 17:41:25 postfix/smtp[17412]: 78943550B18: to=, relay=none, delay=8798, delays=8768/0.01/30/0, dsn=4.4.1, status=deferred (connect to cornellpetsco.com[66.246.235.42]:25: Connection timed out)
May 24 17:41:25 postfix/smtp[17419]: C4D28550B1A: to=, relay=none, delay=9819, delays=9789/0.02/30/0, dsn=4.4.1, status=deferred (connect to mx1.home.com[10.42.23.11]:25: Connection timed out)
May 24 17:41:25 postfix/smtp[17420]: C5C72550AEB: to=, relay=none, delay=8837, delays=8807/0.02/30/0, dsn=4.4.1, status=deferred (connect to mx1.home.com[10.42.23.11]:25: Connection timed out)
May 24 17:41:25 postfix/smtp[17413]: 57AD3550B09: to=, relay=none, delay=12995, delays=12965/0.01/30/0, dsn=4.4.1, status=deferred (connect to mx1.home.com[10.42.23.11]:25: Connection timed out)
May 24 17:41:25 postfix/smtp[17418]: C336C550B25: to=, relay=none, delay=8733, delays=8703/0.02/30/0, dsn=4.4.1, status=deferred (connect to mx1.home.com[10.42.23.11]:25: Connection timed out)
May 24 17:42:01 /USR/SBIN/CRON[17555]: (root) CMD (/usr/local/rtm/bin/rtm 56 > /dev/null 2> /dev/null)


vorrei sapere se qualcuno sta spammando di brutto o almeno sta cercando di farlo...
E nel caso come bloccarlo impostando postfix...