Forum Debian Users Gang

lewyx84 · 2014-04-18 20:56:52

Cześć,
dzisiaj jeden z moich userów dostał maila:

Please carefully read the attached instructions before updating settings. This e-mail and / or any attachment(s) is intended solely for the above-mentioned recipient(s) and it may contain confidential or privileged information. If you have received it in error, please notify us immediately at helpdesk@domain.com and delete the e-mail. You must not copy it, distribute it, disclose it or take any action in reliance on it.[/quote]
Z logów widać, że:

Kod:

Apr 18 16:28:15 datacenter postfix/qmgr[4091]: A6485E612CA: from=<Administrator@ovh.fr>, size=11054, nrcpt=1 (queue active)
Apr 18 16:28:15 datacenter postfix/qmgr[4091]: 97D6FE61348: from=<Administrator@ovh.fr>, size=11687, nrcpt=1 (queue active)
Apr 18 16:28:15 datacenter amavis[31358]: (31358-18) Passed BANNED (.exe,OutlookSettings.scr) {RelayedTaggedOutbound}, LOCAL [109.190.36.139]:64550 [109.190.36.139] <Administrator@ovh.fr> -> <biuro@domain.com>, Queue-ID: A6485E612CA, Message-ID: <3I2BC5RGOFTE41ET774VCDSJGA7DCFCP3P6VD0J@ovh.fr>, mail_id: pp2IriiwxobO, Hits: -0.01, size: 11051, queued_as: 97D6FE61348, 593 ms
Apr 18 16:36:04 datacenter postfix/qmgr[4091]: 5B9E1E6132F: from=<Administrator@obolo.com>, size=10979, nrcpt=1 (queue active)
Apr 18 16:36:05 datacenter postfix/qmgr[4091]: 6D0F3E6134C: from=<Administrator@obolo.com>, size=11612, nrcpt=1 (queue active)

Poniżej widać również:

Kod:

Apr 18 16:36:05 datacenter postfix/qmgr[4091]: 6D0F3E6134C: from=<Administrator@obolo.com>, size=11612, nrcpt=1 (queue active)
Apr 18 16:36:05 datacenter amavis[31358]: (31358-19) Passed BANNED (.exe,OutlookSettings.scr) {RelayedTaggedOutbound}, LOCAL [14.160.13.250]:54610 [14.160.13.250] <Administrator@obolo.com> -> <biuro@domain.com>, Queue-ID: 5B9E1E6132F, Message-ID: <9V8P19E69HK28LCQK43P124VRILOTIFB9DPR8X8@>, mail_id: qmj69zAgV2ms, Hits: 2.442, size: 10976, queued_as: 6D0F3E6134C, 657 ms
Apr 18 18:09:37 datacenter postfix/smtpd[32640]: NOQUEUE: reject: RCPT from unknown[94.198.210.38]: 554 5.7.1 <host130-250-static.59-79-b.business.telecomitalia.it>: Helo command rejected: ACCESS DENIED. Your email was rejected because the sending mail server does not identify itself correctly (business.telecomitalia.it); from=<Administrator@obkcg.com> to=<biuro@domain..com> proto=ESMTP helo=<host130-250-static.59-79-b.business.telecomitalia.it>
Apr 18 18:11:16 datacenter postfix/qmgr[4091]: B4A3BE6112E: from=<Administrator@ok1rr.com>, size=11074, nrcpt=1 (queue active)
Apr 18 18:11:17 datacenter postfix/qmgr[4091]: 2F904E6134D: from=<Administrator@ok1rr.com>, size=11707, nrcpt=1 (queue active)
Apr 18 18:11:17 datacenter amavis[28800]: (28800-01) Passed BANNED (.exe,OutlookSettings.scr) {RelayedTaggedOutbound}, LOCAL [86.61.73.25]:17489 [86.61.73.25] <Administrator@ok1rr.com> -> <biuro@domain..com>, Queue-ID: B4A3BE6112E, Message-ID: <N7MU6FL97HNP7A49M9Y765AGE8EBBFKAQFRH3L1@siol.net>, mail_id: TBkeuGjtGMvE, Hits: 0, size: 11071, queued_as: 2F904E6134D, 718 ms

Czy to wina postfixa na serwerze, że przepuścił takiego maila?

Time (s)	Query
0.00010	SET CHARSET latin2
0.00005	SET NAMES latin2
0.00060	SELECT u., g., o.logged FROM punbb_users AS u INNER JOIN punbb_groups AS g ON u.group_id=g.g_id LEFT JOIN punbb_online AS o ON o.ident='18.224.73.124' WHERE u.id=1
0.00139	UPDATE punbb_online SET logged=1733053688 WHERE ident='18.224.73.124'
0.00034	SELECT * FROM punbb_online WHERE logged<1733053388
0.00083	SELECT topic_id FROM punbb_posts WHERE id=263804
0.00026	SELECT id FROM punbb_posts WHERE topic_id=25644 ORDER BY posted
0.00093	SELECT t.subject, t.closed, t.num_replies, t.sticky, f.id AS forum_id, f.forum_name, f.moderators, fp.post_replies, 0 FROM punbb_topics AS t INNER JOIN punbb_forums AS f ON f.id=t.forum_id LEFT JOIN punbb_forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id=3) WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND t.id=25644 AND t.moved_to IS NULL
0.00012	SELECT search_for, replace_with FROM punbb_censoring
0.00078	SELECT u.email, u.title, u.url, u.location, u.use_avatar, u.signature, u.email_setting, u.num_posts, u.registered, u.admin_note, p.id, p.poster AS username, p.poster_id, p.poster_ip, p.poster_email, p.message, p.hide_smilies, p.posted, p.edited, p.edited_by, g.g_id, g.g_user_title, o.user_id AS is_online FROM punbb_posts AS p INNER JOIN punbb_users AS u ON u.id=p.poster_id INNER JOIN punbb_groups AS g ON g.g_id=u.group_id LEFT JOIN punbb_online AS o ON (o.user_id=u.id AND o.user_id!=1 AND o.idle=0) WHERE p.topic_id=25644 ORDER BY p.id LIMIT 0,25
0.00109	UPDATE punbb_topics SET num_views=num_views+1 WHERE id=25644
Total query time: 0.00649 s

Forum Debian Users Gang

Ogłoszenie

#1 2014-04-18 20:56:52

lewyx84 - Użytkownik

Dziwny mail od (niby) ovh.fr

Kod:

Kod:

Stopka forum

Informacje debugowania