Al final lo hice revisando los log del postfix como me indicó Kurgans
De vez en cuando me encuentro que auque tengo limitados los mensajes gmail me bloquea la ip y necesito hacer carbon copy a ver si alguien esta enviado correo masivo y desde que cuenta
[SOLUCIONADO] hacer carbon copy de los mensajes que se envien desde el server
- Puntonetsvb
- Closed
- Thread is marked as Resolved.
-
-
Tio es mas facil hacer un grep como te dije por ahi es otro post ademas de mas legal que administres un servidor no implica que puedas leer comunicaciones personales de tus usuarios aunque sea amigos, conocidos o no te paguen por el servicio.
Tienes esa opcion de postfix, pero es mejor y mas sano sacar un listado y meterlo en un txt de lo que envias a gmail
-
-
hice el grep, pero por lo que leo veo que es gmail el que me envia a cuentas que no existen de mis dominios, creo
Nov 17 06:29:12 ks201270 postfix/smtpd[18482]: NOQUEUE: reject: RCPT from bba140734.alshamil.net.ae[217.165.137.18]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<bba140734.alshamil.net.ae>
Nov 17 06:29:12 ks201270 postfix/smtpd[18482]: NOQUEUE: reject: RCPT from bba140734.alshamil.net.ae[217.165.137.18]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<bba140734.alshamil.net.ae>
Nov 17 06:30:10 ks201270 postfix/smtpd[18482]: NOQUEUE: reject: RCPT from unknown[178.131.55.18]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<gmail.com>
Nov 17 06:30:10 ks201270 postfix/smtpd[19828]: NOQUEUE: reject: RCPT from unknown[178.131.55.18]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<gmail.com> -
Yo tiraria mas de hilo gmail no se equivoca y si dice que le estas mandando correo es que lo estas haciendo asi que centrate en lo to no en los from
-
-
Display More
hice el grep, pero por lo que leo veo que es gmail el que me envia a cuentas que no existen de mis dominios, creoNov 17 06:29:12 ks201270 postfix/smtpd[18482]: NOQUEUE: reject: RCPT from bba140734.alshamil.net.ae[217.165.137.18]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<bba140734.alshamil.net.ae>
Nov 17 06:29:12 ks201270 postfix/smtpd[18482]: NOQUEUE: reject: RCPT from bba140734.alshamil.net.ae[217.165.137.18]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<bba140734.alshamil.net.ae>
Nov 17 06:30:10 ks201270 postfix/smtpd[18482]: NOQUEUE: reject: RCPT from unknown[178.131.55.18]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<gmail.com>
Nov 17 06:30:10 ks201270 postfix/smtpd[19828]: NOQUEUE: reject: RCPT from unknown[178.131.55.18]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<gmail.com>Si te fijas las ip que dice ahi, para empezar no son de gmail.
Display MoreCode- root@orion:/home/federico# whois 178.131.55.18
- % This is the RIPE Database query service.
- % The objects are in RPSL format.
- %
- % The RIPE Database is subject to Terms and Conditions.
- % See http://www.ripe.net/db/support/db-terms-conditions.pdf
- % Note: this output has been filtered.
- % To receive output for a database update, use the "-B" flag.
- % Information related to '178.131.0.0 - 178.131.127.255'
- % No abuse contact registered for 178.131.0.0 - 178.131.127.255
- inetnum: 178.131.0.0 - 178.131.127.255
- netname: MOBINNET
- descr: The Only National WiMAX Service Provider In Iran
- country: IR
- admin-c: ML13324-RIPE
- tech-c: ML13324-RIPE
- status: ASSIGNED PA
- mnt-by: MNT-MOBINNET
- mnt-domains: MTC-DomainMNT
- source: RIPE # Filtered
- role: MTC LIR-ADMIN
- address: Mobin Net Communication Company
- address: Sh.Motahari 377
- address: 1595713463 Tehran IRAN
- phone: +98 21 83869601
- fax-no: +98 21 88700396
- admin-c: AB24133-RIPE
- tech-c: AB24133-RIPE
- nic-hdl: ML13324-RIPE
- abuse-mailbox: [email protected]
- mnt-by: MNT-MOBINNET
- source: RIPE # Filtered
- % Information related to '178.131.0.0/17AS50810'
- route: 178.131.0.0/17
- descr: Mobin Net Communication Company (Private Joint Stock)
- origin: AS50810
- mnt-by: MNT-MOBINNET
- source: RIPE # Filtered
- % This query was served by the RIPE Database Query Service version 1.70 (WHOIS2)
Resumiendo:
descr: The Only National WiMAX Service Provider In IranSon ips iranies... osea alguien se hace pasar por gmail, pero igual tu servidor no le creyo, pero parece que te faltaria el policy-id...