Posts by Fiesling

Fiesling · Oct 28th 2017

Quote from Backdraft007

Hallo,

die mailq leeren.

Grüße
Chris

schon gemacht.
Nach und nach erscheinen noch ein paar Mails vom Mailer-Deamon.
Aber das Problem scheint zur Zeit nicht mehr zu Existieren.
Jetzt kommt der nervigste Teil Schauen wie man aus den Blacklists wieder raus kommt

Fiesling · Oct 27th 2017

Quote from Bulli

Ändere doch mal das PW deines Mailaccounts.
Gibt ja mehrere Varianten über die Spam verschickt werden kann.
Lokaler PC infiziert und nutzt dein Mailkonto im Outlook. PHP Script auf deinem Server was permanent aufgerufen wird und Mails verschickt. Da ist ein Relaytest überhaupt kein Indiz für einen sicheren Server.

Das wird regelmäßig geändert das PW.
Localer PC und so mal überprüft nicht gefunden.

Quote from Viktor

Hallo,

bei mir wurde mal ein Joomla gekackt.

Eine PHP-Datei wurde hochgeladen und dann wurden tausende von Mails versendet.

Ordner Strucktur sieht OK aus - Kein Verändertes Datum an Datein oder was sonst auffällig war.

Quote from fulltilt

Code

(Authenticated sender: support@bigone1.net)

bedeutet das jemand mit dem zugehörigen Passwort diese Mails versendet

Meinst du wegen dem hier:

Code

Received: from [127.0.0.1] (unknown [179.218.69.142])
(Authenticated sender: support@bigone1.net)
by panel.bigone1.net (Postfix) with ESMTPA id 993D14CB376;
Thu, 26 Oct 2017 14:24:22 +0200 (CEST)

Die "unbekannte" IP ist nicht ovn mir - das ist doch aber die VersenderIP die über mein Server die Mails raus gejagt hat?
Laut Maxmind aus Brasilien (NET Virtua)

Ich werde es mal weiter beobachten.
PWs alle geändert.

Noch erhalte ich ja Hunderte Mails vom Mailer-Deamon - kann also noch nicht sagen ob das Prob aufhört

Fiesling · Oct 26th 2017

Moin

Habe gerade mal mails angerufen bei mir und hatte knapp 5000 neue mails

Anscheint wurde mein Server wohl missbraucht um Spamsmails zu verschicken.
Laut Relaytest ist mein System aber nicht offen?

wie bekomme ich jetzt am besten raus wie das passiert ist?

viell kann ja mal jemand von euch evtl. mal drüber schauen

evtl. kann jemand ja auch damit was anfangen - mail logs sind ca. 150MB groß und wachsen weiter an

hab postfix und dovecot erstmal ausgeschaltet auch

Code

This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
hmcd@oceanfree.net
mailbox is full: retry timeout exceeded
------ This is a copy of the message, including all the headers. ------
Return-path: <support@bigone1.net>
Received: from [178.63.47.151] (helo=panel.bigone1.net)
by polly.esatclear.ie with esmtp (Exim 4.63)
(envelope-from <support@bigone1.net>)
id 1e7hep-0007Hp-2C
for hmcd@oceanfree.net; Thu, 26 Oct 2017 13:53:11 +0100
Received: from [127.0.0.1] (unknown [179.218.69.142])
(Authenticated sender: support@bigone1.net)
by panel.bigone1.net (Postfix) with ESMTPA id 993D14CB376;
Thu, 26 Oct 2017 14:24:22 +0200 (CEST)
DKIM-Filter: OpenDKIM Filter v2.9.2 panel.bigone1.net 993D14CB376
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=bigone1.net; s=mail;
t=1509020670; bh=CtRNsEZC1RyaoTtbc+eT+J9JePOqo91I9kaidGWDGJE=;
h=Date:Subject:From:To:Cc:From;
b=wCsjc3uaY7RSQWijBHecjcovDEItLvBFs3IdMfX4OOYDIS62R4Oxb9zBQMo6jLFRf
8mOtim//M1oOr0zJjCM10k6Z6d6iVqLo8tpK+qCQHYx0n5xX3skUPEUUm2/iCKDENz
xPnRPFj+THTr5/otcrJz8dl0Qd50xZNKSPIE5P5M=
Date: Thu, 26 Oct 2017 14:24:13 +0200
Subject: Culling, a disciple of C.
From: support@bigone1.net
To: franklinhearth@verizon.net
Cc: enkqp@stlouisco.com
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--_com.android.email_24969879456061"
Message-ID: <2oy22fc-2u8qru-55@bigone1.net>
X-Spam-Status: No, score=1.3 required=5.0 tests=ALL_TRUSTED,AWL,HTML_MESSAGE,
MIME_HTML_MOSTLY,MSGID_RANDY autolearn=disabled version=3.4.0
X-Spam-Level: *
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on panel.bigone1.net
X-Virus-Scanned: clamav-milter 0.99.2 at panel
X-Virus-Status: Clean
This is a multi-part message in MIME format

Display More

logauszug aus mail.info

Display Spoiler

Oct 26 12:54:02 panel postfix/cleanup[31350]: 1341C4C5355: message-id=<585DEBB8B367498A56531AA78370EF57@retrospeed.net>
Oct 26 12:54:02 panel postfix/smtpd[29972]: D7CEA4C535B: client=ec2-34-204-10-232.compute-1.amazonaws.com[34.204.10.232], sasl_method=LOGIN, sasl_username=support@bigone1.net
Oct 26 12:54:02 panel postfix/smtpd[1321]: D7CDD4C535A: client=ec2-34-204-10-232.compute-1.amazonaws.com[34.204.10.232], sasl_method=LOGIN, sasl_username=support@bigone1.net
Oct 26 12:54:02 panel postfix/smtpd[5667]: connect from ec2-54-236-83-48.compute-1.amazonaws.com[54.236.83.48]
Oct 26 12:54:02 panel postfix/smtp[5811]: D58EA4C4FC8: to=<fantomaz42@gmail.com>, relay=gmail-smtp-in.l.google.com[64.233.167.27]:25, conn_use=5, delay=112, delays=6.8/105/0.01/0.22, dsn=5.2.2, status=bounced (host gmail-smtp-in.l.google.com[64.233.167.27] said: 552-5.2.2 The email account that you tried to reach is over quota. Please direct 552-5.2.2 the recipient to 552 5.2.2 https://support.google.com/mail/?p=OverQuotaPerm q14si3882323wre.60 - gsmtp (in reply to RCPT TO command))
Oct 26 12:54:02 panel postfix/smtp[29797]: 7F5194C4E0E: to=<dating@airbozo.com>, relay=airbozo.com[69.89.20.60]:25, delay=112, delays=0.05/101/5.6/5.4, dsn=5.0.0, status=bounced (host airbozo.com[69.89.20.60] said: 550 No Such User Here" (in reply to RCPT TO command))
Oct 26 12:54:02 panel postfix/smtp[28018]: 935554C5059: to=<dating@frontend.ngi.de>, relay=frontend.ngi.de[5.9.247.9]:25, delay=105, delays=0/105/0.02/0.21, dsn=5.7.1, status=bounced (host frontend.ngi.de[5.9.247.9] said: 554 5.7.1 <dating@frontend.ngi.de>: Relay access denied (in reply to RCPT TO command))
Oct 26 12:54:02 panel postfix/bounce[5468]: EA8B14C4F84: sender non-delivery notification: A05594C502F
Oct 26 12:54:02 panel postfix/qmgr[3546]: 935554C5059: removed
Oct 26 12:54:02 panel postfix/smtp[28021]: connect to wpwatkin.fsnet.co.uk[54.154.79.4]:25: Connection timed out
Oct 26 12:54:02 panel postfix/cleanup[1510]: D182A4C5352: message-id=<D2D7613239EDC300DCD9902D09319DE7@ono.com>
Oct 26 12:54:02 panel postfix/cleanup[31319]: D9DB84C5354: message-id=<202593C0CB1F31F22E2B62DFFBD6B3BF@msg.onenet.net>
Oct 26 12:54:02 panel postfix/error[3534]: E592A4C5324: to=<kentonds30@yahoo.com>, relay=none, delay=7.1, delays=7/0/0/0.09, dsn=4.4.2, status=deferred (delivery temporarily suspended: lost connection with mta7.am0.yahoodns.net[98.138.112.32] while sending RCPT TO)
Oct 26 12:54:02 panel postfix/error[3522]: CD8324C5321: to=<kirkcuchulainn1@aol.com>, relay=none, delay=7.2, delays=7.1/0/0/0.09, dsn=4.0.0, status=deferred (delivery temporarily suspended: host mailin-01.mx.aol.com[152.163.0.99] refused to talk to me: 421 mtaig-aak01.mx.aol.com Service unavailable - try again later)
Oct 26 12:54:02 panel postfix/error[3517]: F17D04C5326: to=<rbkmrjdbx@nokiamail.com>, relay=none, delay=7, delays=6.9/0/0/0.09, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to nokiamail.com[191.236.192.121]:25: Connection timed out)
Oct 26 12:54:02 panel postfix/smtpd[750]: disconnect from ec2-52-72-59-126.compute-1.amazonaws.com[52.72.59.126]
Oct 26 12:54:02 panel postfix/smtpd[1324]: lost connection after UNKNOWN from ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181]
Oct 26 12:54:02 panel postfix/smtpd[1324]: disconnect from ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181]
Oct 26 12:54:02 panel postfix/smtp[5326]: BA3E84C4D1B: host hotmail-co-uk.olc.protection.outlook.com[104.47.0.33] said: 452 4.5.3 Recipients belong to multiple regions ATTR38 [HE1EUR01FT059.eop-EUR01.prod.protection.outlook.com] (in reply to RCPT TO command)
Oct 26 12:54:02 panel postfix/smtp[26750]: 2DD264C4E41: to=<deltalands@hotmail.com>, relay=hotmail-com.olc.protection.outlook.com[104.47.38.33]:25, conn_use=2, delay=120, delays=10/109/0.09/0.77, dsn=2.6.0, status=sent (250 2.6.0 <969325767DA98744989DD46A9E8C4DAA@cloudhosting.domainsatcost.ca> [InternalId=51814485536170, Hostname=BL2NAM02HT157.eop-nam02.prod.protection.outlook.com] 8551 bytes in 0.259, 32.212 KB/sec Queued mail for delivery)
Oct 26 12:54:02 panel postfix/cleanup[30803]: 1D11A4C5356: message-id=<7E7BCD9E95416FAC70753C81A551E0FF@mx0.123-reg.co.uk>
Oct 26 12:54:02 panel postfix/smtpd[32406]: connect from ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181]
Oct 26 12:54:02 panel postfix/smtpd[1303]: disconnect from ec2-52-91-185-213.compute-1.amazonaws.com[52.91.185.213]
Oct 26 12:54:03 panel postfix/smtpd[3658]: connect from ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181]
Oct 26 12:54:03 panel postfix/smtpd[31329]: disconnect from ec2-34-204-10-232.compute-1.amazonaws.com[34.204.10.232]
Oct 26 12:54:03 panel postfix/cleanup[4281]: 537064C5357: message-id=<797CCA99924668AB77723B8571BAE47F@ono.com>
Oct 26 12:54:03 panel postfix/cleanup[32471]: 43A694C4E2D: message-id=<4441F7A4AF7B55964A4F06BB9F74A31E@ono.com>
Oct 26 12:54:03 panel postfix/qmgr[3546]: 7F5194C4E0E: removed
Oct 26 12:54:03 panel postfix/smtpd[32367]: 1C4CD4C4D5F: client=ec2-54-236-83-48.compute-1.amazonaws.com[54.236.83.48], sasl_method=LOGIN, sasl_username=support@bigone1.net
Oct 26 12:54:03 panel postfix/smtpd[797]: 1DC714C4E0E: client=ec2-13-58-227-120.us-east-2.compute.amazonaws.com[13.58.227.120], sasl_method=LOGIN, sasl_username=support@bigone1.net
Oct 26 12:54:03 panel postfix/smtp[27225]: 34E194C500D: to=<silly@hotmail.com>, relay=hotmail-com.olc.protection.outlook.com[104.47.38.33]:25, conn_use=6, delay=119, delays=9.8/109/0.09/0.7, dsn=2.6.0, status=sent (250 2.6.0 <4144F2A1AA7E50934F4A03BD49B27CED@vodafone.it> [InternalId=49636937124758, Hostname=BL2NAM02HT166.eop-nam02.prod.protection.outlook.com] 8461 bytes in 0.304, 27.152 KB/sec Queued mail for delivery)
Oct 26 12:54:03 panel postfix/cleanup[2955]: 223154C5035: message-id=<20171026105403.223154C5035@panel.bigone1.net>
Oct 26 12:54:03 panel spamd[4991]: spamd: clean message (2.4/5.0) for spamass-milter:131 in 0.6 seconds, 3127 bytes.
Oct 26 12:54:03 panel spamd[4991]: spamd: result: . 2 - ALL_TRUSTED,AWL,HTML_MESSAGE,MISSING_HEADERS,REPLYTO_WITHOUT_TO_CC scantime=0.6,size=3127,user=spamass-milter,uid=131,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamassassin.sock,mid=<ABAE184B4094BA79A5A0E957A30AA81A@laboiteaimages.ca>,autolearn=disabled
Oct 26 12:54:03 panel spamd[5974]: spamd: clean message (3.4/5.0) for spamass-milter:131 in 0.6 seconds, 3128 bytes.
Oct 26 12:54:03 panel spamd[5974]: spamd: result: . 3 - ALL_TRUSTED,AWL,FREEMAIL_FORGED_REPLYTO,HTML_MESSAGE,MIME_BASE64_TEXT,MISSING_HEADERS,REPLYTO_WITHOUT_TO_CC scantime=0.6,size=3128,user=spamass-milter,uid=131,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamassassin.sock,mid=<5F5AECBFB4604E8D51541DA317824805@ono.com>,autolearn=disabled
Oct 26 12:54:03 panel postfix/smtpd[5667]: lost connection after UNKNOWN from ec2-54-236-83-48.compute-1.amazonaws.com[54.236.83.48]
Oct 26 12:54:03 panel postfix/smtpd[5667]: disconnect from ec2-54-236-83-48.compute-1.amazonaws.com[54.236.83.48]
Oct 26 12:54:03 panel postfix/cleanup[764]: 469074C5051: message-id=<E2E7510209DDF330ECE9A01D398E68B9@pasestudios.com>
Oct 26 12:54:03 panel postfix/smtpd[32412]: 2C6324C5059: client=ec2-13-58-227-120.us-east-2.compute.amazonaws.com[13.58.227.120], sasl_method=LOGIN, sasl_username=support@bigone1.net
Oct 26 12:54:03 panel postfix/bounce[4812]: 34E194C500D: sender non-delivery notification: 223154C5035
Oct 26 12:54:03 panel postfix/qmgr[3546]: A58974C531F: from=<dating@mvelegantservice.com>, size=2891, nrcpt=5 (queue active)
Oct 26 12:54:03 panel postfix/qmgr[3546]: 34E194C500D: removed
Oct 26 12:54:03 panel postfix/qmgr[3546]: 223154C5035: from=<>, size=5360, nrcpt=1 (queue active)
Oct 26 12:54:03 panel postfix/qmgr[3546]: 098364C5328: from=<dating@equaboiler.com.ec>, size=2910, nrcpt=5 (queue active)
Oct 26 12:54:03 panel spamd[4991]: spamd: got connection over /var/run/spamassassin.sock
Oct 26 12:54:03 panel spamd[2959]: prefork: child states: BBBBB
Oct 26 12:54:03 panel spamd[2959]: prefork: server reached --max-children setting, consider raising it
Oct 26 12:54:03 panel spamd[4991]: spamd: processing message <959026757EAA84479B9ED7699D745D1D@eurosky-travel.com> for spamass-milter:131
Oct 26 12:54:03 panel spamd[5974]: spamd: got connection over /var/run/spamassassin.sock
Oct 26 12:54:03 panel spamd[2959]: prefork: child states: BBBBB
Oct 26 12:54:03 panel spamd[2959]: prefork: server reached --max-children setting, consider raising it
Oct 26 12:54:03 panel spamd[5974]: spamd: processing message <979224777CA88645999CD5684C1124BF@kabelbw.de> for spamass-milter:131
Oct 26 12:54:03 panel postfix/error[3532]: A58974C531F: to=<simonottley@yahoo.co.uk>, relay=none, delay=7.7, delays=7.6/0/0/0.07, dsn=4.4.2, status=deferred (delivery temporarily suspended: lost connection with mx-eu.mail.am0.yahoodns.net[188.125.69.79] while sending RCPT TO)
Oct 26 12:54:03 panel spamd[5934]: spamd: clean message (2.2/5.0) for spamass-milter:131 in 0.6 seconds, 2978 bytes.
Oct 26 12:54:03 panel spamd[5934]: spamd: result: . 2 - ALL_TRUSTED,HTML_MESSAGE,MISSING_HEADERS,REPLYTO_WITHOUT_TO_CC scantime=0.6,size=2978,user=spamass-milter,uid=131,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamassassin.sock,mid=<ACA91F4C4793BD7EA2A7EE5357ED7D73@speedy.com.ar>,autolearn=disabled
Oct 26 12:54:03 panel spamd[6019]: spamd: clean message (2.2/5.0) for spamass-milter:131 in 0.6 seconds, 3019 bytes.
Oct 26 12:54:03 panel spamd[6019]: spamd: result: . 2 - ALL_TRUSTED,HTML_MESSAGE,MISSING_HEADERS,REPLYTO_WITHOUT_TO_CC scantime=0.6,size=3019,user=spamass-milter,uid=131,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamassassin.sock,mid=<E4E157040FDBF536EAEFA618FC75E974@poczta.pl>,autolearn=disabled
Oct 26 12:54:03 panel postfix/smtp[5326]: BA3E84C4D1B: to=<aaronfalsafi@hotmail.co.uk>, relay=hotmail-co-uk.olc.protection.outlook.com[104.47.0.33]:25, conn_use=5, delay=113, delays=7.1/105/0.04/0.5, dsn=2.6.0, status=sent (250 2.6.0 <0104B2E1EA3E10D30F0A43FD49051B45@hywoman.ac.kr> [InternalId=33191507381440, Hostname=HE1EUR01HT012.eop-EUR01.prod.protection.outlook.com] 8529 bytes in 0.254, 32.787 KB/sec Queued mail for delivery)
Oct 26 12:54:03 panel postfix/smtp[5326]: BA3E84C4D1B: to=<earlobe34@hotmail.co.uk>, relay=hotmail-co-uk.olc.protection.outlook.com[104.47.0.33]:25, conn_use=5, delay=113, delays=7.1/105/0.04/0.5, dsn=2.6.0, status=sent (250 2.6.0 <0104B2E1EA3E10D30F0A43FD49051B45@hywoman.ac.kr> [InternalId=33191507381440, Hostname=HE1EUR01HT012.eop-EUR01.prod.protection.outlook.com] 8529 bytes in 0.254, 32.787 KB/sec Queued mail for delivery)
Oct 26 12:54:03 panel postfix/smtpd[32404]: CAC674C5359: reject: RCPT from ec2-13-58-227-120.us-east-2.compute.amazonaws.com[13.58.227.120]: 450 4.1.2 <pauli@co.uk>: Recipient address rejected: Domain not found; from=<dating@snow.pro.br> to=<pauli@co.uk> proto=ESMTP helo=<classicalmusic.spb.ru>
Oct 26 12:54:03 panel postfix/smtp[27992]: 7496E4C4FD6: to=<stansmum@hotmail.com>, relay=hotmail-com.olc.protection.outlook.com[104.47.37.33]:25, conn_use=3, delay=126, delays=7.2/100/18/0.82, dsn=2.6.0, status=sent (250 2.6.0 <F0F543101BCFE122FEFBB20CA8DF6B23@kawansakti.com> [InternalId=51440823391821, Hostname=CY1NAM02HT064.eop-nam02.prod.protection.outlook.com] 8224 bytes in 0.256, 31.356 KB/sec Queued mail for delivery)
Oct 26 12:54:03 panel postfix/cleanup[31809]: 497794C500D: message-id=<20171026105403.497794C500D@panel.bigone1.net>
Oct 26 12:54:03 panel spamd[6019]: spamd: got connection over /var/run/spamassassin.sock
Oct 26 12:54:03 panel spamd[2959]: prefork: child states: BBBBB
Oct 26 12:54:03 panel spamd[2959]: prefork: server reached --max-children setting, consider raising it
Oct 26 12:54:03 panel spamd[6019]: spamd: processing message <D6D365363DE9C704D8DD94292D66FAE8@vodafone.it> for spamass-milter:131
Oct 26 12:54:03 panel spamd[2959]: prefork: child states: BBBBB
Oct 26 12:54:03 panel spamd[5934]: spamd: got connection over /var/run/spamassassin.sock
Oct 26 12:54:03 panel spamd[2959]: prefork: server reached --max-children setting, consider raising it
Oct 26 12:54:03 panel spamd[5934]: spamd: processing message <5653E5B6BD694784585D14AA5EF94DDF@icreativo.ru> for spamass-milter:131
Oct 26 12:54:03 panel postfix/smtpd[30848]: disconnect from ec2-34-204-10-232.compute-1.amazonaws.com[34.204.10.232]
Oct 26 12:54:03 panel postfix/qmgr[3546]: 8848D4C52E1: from=<dating@dannychristensen.com>, size=2777, nrcpt=4 (queue active)
Oct 26 12:54:03 panel postfix/qmgr[3546]: 56A7B4C51A4: from=<dating@sailormoon.com>, size=2882, nrcpt=3 (queue active)
Oct 26 12:54:03 panel postfix/qmgr[3546]: 497794C500D: from=<>, size=6089, nrcpt=1 (queue active)
Oct 26 12:54:03 panel spamd[5928]: spamd: clean message (2.3/5.0) for spamass-milter:131 in 0.6 seconds, 2978 bytes.
Oct 26 12:54:03 panel spamd[5928]: spamd: result: . 2 - ALL_TRUSTED,AWL,HTML_MESSAGE,MISSING_HEADERS,REPLYTO_WITHOUT_TO_CC scantime=0.6,size=2978,user=spamass-milter,uid=131,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamassassin.sock,mid=<A6A315464D99B774A8ADE4595D77CBCC@eurosky-travel.com>,autolearn=disabled
Oct 26 12:54:03 panel postfix/bounce[4796]: 7496E4C4FD6: sender non-delivery notification: 497794C500D
Oct 26 12:54:03 panel spamd[5928]: spamd: got connection over /var/run/spamassassin.sock
Oct 26 12:54:03 panel spamd[2959]: prefork: child states: BBBBB
Oct 26 12:54:03 panel spamd[2959]: prefork: server reached --max-children setting, consider raising it
Oct 26 12:54:03 panel spamd[5928]: spamd: processing message <B9BC0A595286A86BB7B2FB46428B9732@vtown.com.au> for spamass-milter:131
Oct 26 12:54:03 panel postfix/cleanup[32421]: D7CDD4C535A: message-id=<AFAA1C4F4490BE7DA1A4ED53A7511EFC@rambler.ru>
Oct 26 12:54:03 panel postfix/cleanup[30850]: D7CEA4C535B: message-id=<090CBAE9E23618DB07024BF501ABD55B@togzone.co.nz>
Oct 26 12:54:03 panel postfix/smtpd[2878]: connect from ec2-54-236-83-48.compute-1.amazonaws.com[54.236.83.48]
Oct 26 12:54:03 panel postfix/smtpd[27874]: disconnect from ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181]
Oct 26 12:54:03 panel postfix/error[2324]: 8848D4C52E1: to=<neiilcowan1@aol.com>, relay=none, delay=8, delays=7.9/0/0/0.08, dsn=4.0.0, status=deferred (delivery temporarily suspended: host mailin-01.mx.aol.com[152.163.0.99] refused to talk to me: 421 mtaig-aak01.mx.aol.com Service unavailable - try again later)
Oct 26 12:54:03 panel postfix/error[3557]: 56A7B4C51A4: to=<jamieboyy5064521@aol.com>, relay=none, delay=7.2, delays=7.1/0/0/0.08, dsn=4.0.0, status=deferred (delivery temporarily suspended: host mailin-01.mx.aol.com[152.163.0.99] refused to talk to me: 421 mtaig-aak01.mx.aol.com Service unavailable - try again later)
Oct 26 12:54:03 panel postfix/smtpd[30834]: connect from ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181]
Oct 26 12:54:03 panel postfix/smtp[28018]: BA3E84C4D1B: host mailin-04.mx.aol.com[64.12.91.196] refused to talk to me: 421 mtaig-mbd04.mx.aol.com Service unavailable - try again later
Oct 26 12:54:03 panel postfix/smtpd[32132]: disconnect from ec2-13-58-227-120.us-east-2.compute.amazonaws.com[13.58.227.120]
Oct 26 12:54:03 panel postfix/qmgr[3546]: 573134C532C: from=<dating@eurosky-travel.com>, size=2744, nrcpt=5 (queue active)
Oct 26 12:54:03 panel postfix/smtpd[29974]: disconnect from ec2-52-91-185-213.compute-1.amazonaws.com[52.91.185.213]
Oct 26 12:54:03 panel postfix/error[3557]: 56A7B4C51A4: to=<jenberot@aol.com>, relay=none, delay=7.2, delays=7.1/0/0/0.14, dsn=4.0.0, status=deferred (delivery temporarily suspended: host mailin-01.mx.aol.com[152.163.0.99] refused to talk to me: 421 mtaig-aak01.mx.aol.com Service unavailable - try again later)
Oct 26 12:54:03 panel postfix/smtp[5811]: BA3E84C4D1B: to=<rasto.p@post.sk>, relay=cax.virusfree.cz[212.224.105.17]:25, delay=113, delays=7.1/105/0.03/0.56, dsn=2.0.0, status=sent (250 ok 1509015243 qp 16604)
Oct 26 12:54:03 panel postfix/cleanup[31858]: 7C05B4C41E8: message-id=<20171026105403.7C05B4C41E8@panel.bigone1.net>
Oct 26 12:54:03 panel postfix/smtpd[32390]: connect from ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181]
Oct 26 12:54:03 panel postfix/smtpd[30003]: 8051A4C52A4: client=ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181], sasl_method=LOGIN, sasl_username=support@bigone1.net
Oct 26 12:54:03 panel postfix/error[2334]: 573134C532C: to=<theprowlingkittykat@yahoo.co.uk>, relay=none, delay=7.6, delays=7.6/0/0/0.07, dsn=4.4.2, status=deferred (delivery temporarily suspended: lost connection with mx-eu.mail.am0.yahoodns.net[188.125.69.79] while sending RCPT TO)
Oct 26 12:54:03 panel postfix/smtpd[30834]: lost connection after UNKNOWN from ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181]
Oct 26 12:54:03 panel postfix/smtpd[30834]: disconnect from ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181]
Oct 26 12:54:03 panel postfix/smtpd[2878]: lost connection after CONNECT from ec2-54-236-83-48.compute-1.amazonaws.com[54.236.83.48]
Oct 26 12:54:03 panel postfix/smtpd[2878]: disconnect from ec2-54-236-83-48.compute-1.amazonaws.com[54.236.83.48]
Oct 26 12:54:03 panel postfix/smtpd[2438]: disconnect from ec2-13-58-227-120.us-east-2.compute.amazonaws.com[13.58.227.120]
Oct 26 12:54:03 panel postfix/smtp[28525]: 80B944C4FED: to=<amanxb@hotmail.com>, relay=hotmail-com.olc.protection.outlook.com[104.47.38.33]:25, delay=124, delays=8/100/16/0.1, dsn=4.7.500, status=deferred (host hotmail-com.olc.protection.outlook.com[104.47.38.33] said: 451 4.7.500 Server busy. Please try again later from [178.63.47.151]. (AS3115) [BL2NAM02FT019.eop-nam02.prod.protection.outlook.com] (in reply to MAIL FROM command))
Oct 26 12:54:03 panel postfix/smtp[29798]: D58EA4C4FC8: to=<harford@wt.net>, relay=ismtp.sitestar.everyone.net[216.200.145.235]:25, delay=113, delays=6.8/105/0.49/0.43, dsn=5.0.0, status=bounced (host ismtp.sitestar.everyone.net[216.200.145.235] said: 550 Recipient Rejected: No account by that name here (in reply to RCPT TO command))
Oct 26 12:54:03 panel postfix/bounce[5471]: 7189F4C4FE1: sender non-delivery notification: 7C05B4C41E8
Oct 26 12:54:03 panel postfix/qmgr[3546]: 7C05B4C41E8: from=<>, size=5200, nrcpt=1 (queue active)
Oct 26 12:54:03 panel postfix/cleanup[31867]: 907134C52FA: message-id=<20171026105403.907134C52FA@panel.bigone1.net>
Oct 26 12:54:03 panel postfix/cleanup[31823]: CAC674C5359: message-id=<8E8B3D6E65B19F5C8085CC717597C43D@classicalmusic.spb.ru>
Oct 26 12:54:03 panel postfix/smtpd[32390]: lost connection after UNKNOWN from ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181]
Oct 26 12:54:03 panel postfix/smtpd[32390]: disconnect from ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181]
Oct 26 12:54:03 panel postfix/bounce[4796]: 80B944C4FED: sender non-delivery notification: 907134C52FA
Oct 26 12:54:03 panel postfix/qmgr[3546]: 907134C52FA: from=<>, size=5368, nrcpt=1 (queue active)
Oct 26 12:54:03 panel postfix/cleanup[2638]: 1DC714C4E0E: message-id=<8D883E6D66B29C5F8386CF72766FD48A@vueltacomunicacion.com>
Oct 26 12:54:03 panel postfix/smtpd[2420]: connect from ec2-13-58-227-120.us-east-2.compute.amazonaws.com[13.58.227.120]
Oct 26 12:54:03 panel postfix/smtpd[32368]: B2E694C5308: client=ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181], sasl_method=LOGIN, sasl_username=support@bigone1.net
Oct 26 12:54:03 panel postfix/cleanup[2954]: 8CD474C4D47: message-id=<7E7BCD9E95416FAC70753C823600E1FC@forzaitalia.com.au>
Oct 26 12:54:03 panel postfix/cleanup[32498]: AFEA24C5260: message-id=<383D8BD8D30729EA36337AC470D84813@lab-designltd.com>
Oct 26 12:54:03 panel spamd[5974]: spamd: clean message (2.3/5.0) for spamass-milter:131 in 0.6 seconds, 3104 bytes.
Oct 26 12:54:03 panel spamd[5974]: spamd: result: . 2 - ALL_TRUSTED,AWL,FREEMAIL_FROM,HTML_MESSAGE,MISSING_HEADERS,REPLYTO_WITHOUT_TO_CC scantime=0.6,size=3104,user=spamass-milter,uid=131,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamassassin.sock,mid=<979224777CA88645999CD5684C1124BF@kabelbw.de>,autolearn=disabled
Oct 26 12:54:03 panel spamd[4991]: spamd: clean message (2.2/5.0) for spamass-milter:131 in 0.6 seconds, 2875 bytes.
Oct 26 12:54:03 panel spamd[4991]: spamd: result: . 2 - ALL_TRUSTED,AWL,FREEMAIL_FROM,HTML_MESSAGE,MISSING_HEADERS,REPLYTO_WITHOUT_TO_CC scantime=0.6,size=2875,user=spamass-milter,uid=131,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamassassin.sock,mid=<959026757EAA84479B9ED7699D745D1D@eurosky-travel.com>,autolearn=disabled
Oct 26 12:54:03 panel postfix/smtpd[3658]: C499D4C530B: client=ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181], sasl_method=LOGIN, sasl_username=support@bigone1.net
Oct 26 12:54:03 panel postfix/smtpd[32406]: C7B134C535C: client=ec2-18-221-41-181.us-east-2.compute.amazonaws.com[18.221.41.181], sasl_method=LOGIN, sasl_username=support@bigone1.net
Oct 26 12:54:03 panel postfix/smtp[26750]: F34CD4C4F12: to=<twoinawinnie@hotmail.com>, relay=hotmail-com.olc.protection.outlook.com[104.47.38.33]:25, conn_use=3, delay=120, delays=9.8/109/0.09/0.78, dsn=2.6.0, status=sent (250 2.6.0 <9C992F7C77A38D4E9297DE60C4CA164E@spam.khu.ac.kr> [InternalId=55186034871352, Hostname=BL2NAM02HT110.eop-nam02.prod.protection.outlook.com] 8333 bytes in 0.274, 29.649 KB/sec Queued mail for delivery)
Oct 26 12:54:03 panel postfix/cleanup[4241]: C85284C535D: message-id=<20171026105403.C85284C535D@panel.bigone1.net>
Oct 26 12:54:03 panel spamd[2959]: prefork: child states: BBBBB
Oct 26 12:54:03 panel spamd[5974]: spamd: got connection over /var/run/spamassassin.sock
Oct 26 12:54:03 panel spamd[2959]: prefork: server reached --max-children setting, consider raising it
Oct 26 12:54:03 panel spamd[5974]: spamd: processing message <3A3F89DAD1052BE8343178C5C1A8438A@cba.pl> for spamass-milter:131
Oct 26 12:54:03 panel spamd[4991]: spamd: got connection over /var/run/spamassassin.sock
Oct 26 12:54:03 panel spamd[2959]: prefork: child states: BBBBB
Oct 26 12:54:03 panel spamd[2959]: prefork: server reached --max-children setting, consider raising it
Oct 26 12:54:03 panel spamd[4991]: spamd: processing message <3A3F89DAD1052BE8343178C5C1A8438A@vodafone.it> for spamass-milter:131
Oct 26 12:54:03 panel postfix/smtp[29797]: 2A5BF4C5033: to=<bobby123@hotmial.com>, relay=mail.h-email.net[198.133.159.132]:25, delay=112, delays=5.7/105/0.42/0.36, dsn=2.0.0, status=sent (250 Queued!)
Oct 26 12:54:03 panel spamd[5934]: spamd: clean message (2.2/5.0) for spamass-milter:131 in 0.6 seconds, 2989 bytes.
Oct 26 12:54:03 panel spamd[5934]: spamd: result: . 2 - ALL_TRUSTED,AWL,HTML_MESSAGE,MISSING_HEADERS,REPLYTO_WITHOUT_TO_CC scantime=0.6,size=2989,user=spamass-milter,uid=131,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamassassin.sock,mid=<5653E5B6BD694784585D14AA5EF94DDF@icreativo.ru>,autolearn=disabled
Oct 26 12:54:03 panel spamd[6019]: spamd: clean message (2.3/5.0) for spamass-milter:131 in 0.6 seconds, 2887 bytes.
Oct 26 12:54:03 panel spamd[6019]: spamd: result: . 2 - ALL_TRUSTED,AWL,FREEMAIL_FROM,HTML_MESSAGE,MISSING_HEADERS,REPLYTO_WITHOUT_TO_CC scantime=0.6,size=2887,user=spamass-milter,uid=131,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamassassin.sock,mid=<D6D365363DE9C704D8DD94292D66FAE8@vodafone.it>,autolearn=disabled
Oct 26 12:54:03 panel postfix/bounce[4812]: F34CD4C4F12: sender non-delivery notification: C85284C535D
Oct 26 12:54:03 panel postfix/qmgr[3546]: BA5B64C4F83: from=<dating@vodafone.it>, size=2739, nrcpt=3 (queue active)
Oct 26 12:54:03 panel postfix/qmgr[3546]: CD3B34C5320: from=<dating@orange.pl>, size=2959, nrcpt=3 (queue active)
Oct 26 12:54:03 panel postfix/qmgr[3546]: C85284C535D: from=<>, size=5040, nrcpt=1 (queue active)
Oct 26 12:54:03 panel spamd[5928]: spamd: clean message (2.3/5.0) for spamass-milter:131 in 0.5 seconds, 2882 bytes.
Oct 26 12:54:03 panel spamd[5928]: spamd: result: . 2 - ALL_TRUSTED,AWL,HTML_MESSAGE,MISSING_HEADERS,REPLYTO_WITHOUT_TO_CC scantime=0.5,size=2882,user=spamass-milter,uid=131,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamassassin.sock,mid=<B9BC0A595286A86BB7B2FB46428B9732@vtown.com.au>,autolearn=disabled
Oct 26 12:54:03 panel postfix/qmgr[3546]: 572454C532E: from=<dating@ono.com>, size=2904, nrcpt=2 (queue active)
Oct 26 12:54:03 panel postfix/qmgr[3546]: E62014C52D6: from=<dating@vodafone.it>, size=2748, nrcpt=3 (queue active)
Oct 26 12:54:03 panel spamd[2959]: prefork: child states: BBBBB
Oct 26 12:54:03 panel spamd[2959]: prefork: server reached --max-children setting, consider raising it
Oct 26 12:54:03 panel spamd[5934]: spamd: got connection over /var/run/spamassassin.sock
Oct 26 12:54:03 panel spamd[5934]: spamd: processing message <BFBA0C5F5480AE6DB1B4FD43A77CC716@naturesouq.com> for allgreenandclean@outlook.com:131
Oct 26 12:54:03 panel spamd[2959]: prefork: child states: BBBBB
Oct 26 12:54:03 panel spamd[6019]: spamd: got connection over /var/run/spamassassin.sock
Oct 26 12:54:03 panel spamd[2959]: prefork: server reached --max-children setting, consider raising it
Oct 26 12:54:03 panel spamd[6019]: spamd: processing message <0104B2E1EA3E10D30F0A43FD19D9F61E@futomic.net> for spamass-milter:131
Oct 26 12:54:03 panel postfix/smtpd[31324]: connect from ec2-52-91-185-213.compute-1.amazonaws.com[52.91.185.213]
Oct 26 12:54:03 panel postfix/smtpd[32129]: connect from ec2-52-91-185-213.compute-1.amazonaws.com[52.91.185.213]
Oct 26 12:54:03 panel spamd[5928]: spamd: got connection over /var/run/spamassassin.sock
Oct 26 12:54:03 panel spamd[2959]: prefork: child states: BBBBB
Oct 26 12:54:03 panel spamd[2959]: prefork: server reached --max-children setting, consider raising it
Oct 26 12:54:03 panel spamd[5928]: spamd: processing message <FAFF491A11C5EB28F4F1B806F29930C7@postandparcel.com> for spamass-milter:131
Oct 26 12:54:04 panel postfix/error[2324]: BA5B64C4F83: to=<www.jonny123@yahoo.com>, relay=none, delay=7.3, delays=7.2/0/0/0.12, dsn=4.4.2, status=deferred (delivery temporarily suspended: lost connection with mta7.am0.yahoodns.net[98.138.112.32] while sending RCPT TO)
Oct 26 12:54:04 panel postfix/error[30157]: E592A4C5324: to=<jo12hn34@yahoo.co.uk>, relay=none, delay=8.2, delays=7/0/0/1.2, dsn=4.4.2, status=deferred (delivery temporarily suspended: lost connection with mx-eu.mail.am0.yahoodns.net[188.125.69.79] while sending RCPT TO)
Oct 26 12:54:04 panel postfix/qmgr[3546]: 652C44C532F: from=<dating@poczta.pl>, size=2757, nrcpt=3 (queue active)
Oct 26 12:54:04 panel postfix/smtp[25824]: DA87E4C4B19: host hotmail-com.olc.protection.outlook.com[104.47.38.33] said: 452 4.5.3 Recipients belong to multiple regions ATTR38 [BL2NAM02FT041.eop-nam02.prod.protection.outlook.com] (in reply to RCPT TO command)
Oct 26 12:54:04 panel postfix/smtpd[796]: disconnect from ec2-52-72-59-126.compute-1.amazonaws.com[52.72.59.126]
Oct 26 12:54:04 panel postfix/smtpd[31794]: disconnect from ec2-107-23-10-43.compute-1.amazonaws.com[107.23.10.43]
Oct 26 12:54:04 panel postfix/cleanup[31807]: 1C4CD4C4D5F: message-id=<7471C7949F4B65A67A7F36882C5F19CA@cloudhosting.domainsatcost.ca>
Oct 26 12:54:04 panel postfix/smtpd[32132]: connect from ec2-54-236-83-48.compute-1.amazonaws.com[54.236.83.48]
Oct 26 12:54:04 panel postfix/smtp[25515]: connect to dragongorge.fsworld.co.uk[52.208.171.122]:25: Connection timed out
Oct 26 12:54:04 panel postfix/smtpd[31798]: disconnect from ec2-34-204-10-232.compute-1.amazonaws.com[34.204.10.232]
Oct 26 12:54:04 panel postfix/smtp[5358]: 2502F4C5042: to=<dating@speedy.com.ar>, relay=ar.vmx.terra.com[208.84.244.136]:25, delay=109, delays=0.05/104/1.8/3.4, dsn=5.1.1, status=bounced (host ar.vmx.terra.com[208.84.244.136] said: 550 5.1.1 5.1.1 <dating@speedy.com.ar>: Recipient address rejected (in reply to RCPT TO command))
Oct 26 12:54:04 panel postfix/error[3554]: E62014C52D6: to=<jbatten69@yahoo.com>, relay=none, delay=15, delays=15/0/0/0.17, dsn=4.4.2, status=deferred (delivery temporarily suspended: lost connection with mta7.am0.yahoodns.net[98.138.112.32] while sending RCPT TO)

Fiesling · Oct 24th 2017

Blöde frage,
hast du denn die sub auch im nameserver mit drin bez. nen wildcat eintrag gemacht auf was subdomains auflösen sollen ?

Fiesling · Oct 18th 2017

Moin,

Da Nuxwin meinte, das er den Fehler nicht bestätigen kann, mal ne frage an euch

Hab ihr auch Probleme mit der Rundmail funktion und der Statistik bei den Resellern?
oder bin ich der einzige

Fiesling · Oct 17th 2017

Mahlzeit,

Mir ist heute aufgefallen das das Ticketsystem bei den Resellern nicht geht?
Wenn ich als Reseller drauf klicke, lande ich wieder auf der index.php ?

user_statistics.php gibt bei mir nen 500er Fehler aus als Reseller?

und die Rundmail funktion (/reseller/circular.php) geht auch nicht bei mir.
Erhalte ich ein

Code

An unexpected error occurred
Ein unerwarteter Fehler ist aufgetreten. Bitte wenden Sie sich an Ihren Administrator.

Die Fehler schon alle bekannt?

Debian 8.9
i-mscp : i-MSCP 1.5.1 - Build: 20170908 -Codename: Ennio Morricone

Fiesling · Oct 17th 2017

Problem behoben.

Ts3 bindet sich ja eigedlich an jede IP automatisch.
I wie hatte er sich aber wohl nur an die Proxmox Brücke gebunden. Nachdem ich den Ts3 direkt auf eine IP gebunden hatte, ging es wieder.

Fiesling · Oct 15th 2017

das hab ich ja auch erstmal gemacht aber er braucht noch etliche stunden um die Daten zu kopieren vom Host auf den Gast
Blöde filetranser der macht nur 2,5MB die sek. und sind knapp 80GB

Fiesling · Oct 15th 2017

telnet auf HostIP mit 10011 (TCP) geht ja auch - dann hab ich den Ts3 Server auch dran.

Bin schon den ganzen Tag am suchen und Googeln und verzweifel langsam lach
wäre ich mal bei virtuallBox geblieben xD

Fiesling · Oct 15th 2017

es betrifft alle TS3 Instanzen die dort laufen.

Ich habe das gefühl das durch Proxmox die UDP Ports geblockt werden von außen.

Connecte ich von einer Virtuellen Maschiene die mich Proxmix erstellt wurde, kann ich auf die Ts3 Connecten.

Posts by Fiesling

Server für Spammails missbraucht?

Server für Spammails missbraucht?

Server für Spammails missbraucht?

i-MSCP-Panel nicht erreichbar

Rundmail und statistik bei den Resellern

3 Fehler in i-mscp

Teamspeak3 kein Connecten nach Proxmox installation

Teamspeak3 kein Connecten nach Proxmox installation

Teamspeak3 kein Connecten nach Proxmox installation

Teamspeak3 kein Connecten nach Proxmox installation