Posts by rauschr
-
-
mailq output
Code- mailq-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------61DD7407D2 4241 Tue Oct 10 08:40:54 MAILER-DAEMON (connect to gainweighttoday.com[185.140.110.3]:25: Connection refused) zojadf49p6b@gainweighttoday.com4845E40859 4174 Tue Oct 10 09:47:03 MAILER-DAEMON (connect to nyctodesign.com[185.140.110.3]:25: Connection refused) filip718qsjc@nyctodesign.com4A2FB407AB 4337 Tue Oct 10 08:40:16 MAILER-DAEMON(delivery temporarily suspended: connect to gainweighttoday.com[185.140.110.3]:25: Connection refused) diana9yfzdp2@gainweighttoday.com5083340896 4313 Tue Oct 10 11:06:09 MAILER-DAEMON (connect to gainweighttoday.com[185.140.110.3]:25: Connection refused) matilda9g6awcy@gainweighttoday.com9137940280 3363 Tue Oct 10 03:16:02 MAILER-DAEMON(host aspmx.l.google.com[74.125.71.27] said: 450-4.2.1 The user you are trying to contact is receiving mail too quickly. 450-4.2.1 Please resend your message at a later time. If the user is able to 450-4.2.1 receive mail at that time, your message will be delivered. For more 450-4.2.1 information, please visit 450 4.2.1 https://support.google.com/mail/?p=OverReceiveLimit i70si9494732wri.414 - gsmtp (in reply to RCPT TO command)) bounces-smtp+0en4c01ior@veddvelem.hu97CAC4079D 4236 Tue Oct 10 07:46:18 MAILER-DAEMON (connect to nyctodesign.com[185.140.110.3]:25: Connection refused) oldrichmqdsc4a@nyctodesign.com80D28407F3 4236 Tue Oct 10 09:46:35 MAILER-DAEMON(delivery temporarily suspended: connect to nyctodesign.com[185.140.110.3]:25: Connection refused) blankaq7j0xzc@nyctodesign.com
search mail.log last email
Code: mail.log- cat /var/log/mail.log|grep "blankaq7j0xzc@nyctodesign.com"Oct 10 09:46:34 pro1 postfix/policy-spf[6577]: Policy action=PREPEND Received-SPF: none (nyctodesign.com: No applicable sender policy available) receiver=pro1.ows.hu; identity=mailfrom; envelope-from="blankaq7j0xzc@nyctodesign.com"; helo=altruist.nyctodesign.com; client-ip=134.255.239.40Oct 10 09:46:34 pro1 postgrey[1517]: action=pass, reason=client AWL, client_name=unknown, client_address=134.255.239.40, sender=blankaq7j0xzc@nyctodesign.com, recipient=pappgabor@videomapping.huOct 10 09:46:35 pro1 postfix/qmgr[4820]: 9932F401CF: from=<blankaq7j0xzc@nyctodesign.com>, size=7877, nrcpt=1 (queue active)Oct 10 09:46:35 pro1 postfix/smtp[6912]: 80D28407F3: to=<blankaq7j0xzc@nyctodesign.com>, relay=none, delay=0.15, delays=0.1/0.02/0.03/0, dsn=4.4.1, status=deferred (connect to nyctodesign.com[185.140.110.3]:25: Connection refused)Oct 10 09:56:22 pro1 postfix/error[8163]: 80D28407F3: to=<blankaq7j0xzc@nyctodesign.com>, relay=none, delay=587, delays=587/0.37/0/0.14, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to nyctodesign.com[185.140.110.3]:25: Connection refused)Oct 10 10:06:22 pro1 postfix/error[9543]: 80D28407F3: to=<blankaq7j0xzc@nyctodesign.com>, relay=none, delay=1187, delays=1187/0.13/0/0.05, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to nyctodesign.com[185.140.110.3]:25: Connection refused)Oct 10 10:26:22 pro1 postfix/error[12699]: 80D28407F3: to=<blankaq7j0xzc@nyctodesign.com>, relay=none, delay=2387, delays=2387/0.21/0/0.12, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to nyctodesign.com[185.140.110.3]:25: Connection refused)Oct 10 11:06:22 pro1 postfix/error[18383]: 80D28407F3: to=<blankaq7j0xzc@nyctodesign.com>, relay=none, delay=4787, delays=4787/0.24/0/0.06, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to nyctodesign.com[185.140.110.3]:25: Connection refused)
search last email id in the mail.log
Code: mail.log 80D28407F3- cat /var/log/mail.log|grep "80D28407F3"
- Oct 10 09:46:35 pro1 postfix/cleanup[6014]: 80D28407F3: message-id=<20171010074635.80D28407F3@pro1.ows.hu>
- Oct 10 09:46:35 pro1 postfix/bounce[6910]: 9932F401CF: sender delivery status notification: 80D28407F3
- Oct 10 09:46:35 pro1 postfix/qmgr[4820]: 80D28407F3: from=<>, size=4236, nrcpt=1 (queue active)
- Oct 10 09:46:35 pro1 postfix/smtp[6912]: 80D28407F3: to=<blankaq7j0xzc@nyctodesign.com>, relay=none, delay=0.15, delays=0.1/0.02/0.03/0, dsn=4.4.1, status=deferred (connect to nyctodesign.com[185.140.110.3]:25: Connection refused)
- Oct 10 09:56:22 pro1 postfix/qmgr[4820]: 80D28407F3: from=<>, size=4236, nrcpt=1 (queue active)
- Oct 10 09:56:22 pro1 postfix/error[8163]: 80D28407F3: to=<blankaq7j0xzc@nyctodesign.com>, relay=none, delay=587, delays=587/0.37/0/0.14, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to nyctodesign.com[185.140.110.3]:25: Connection refused)
- Oct 10 10:06:22 pro1 postfix/qmgr[4820]: 80D28407F3: from=<>, size=4236, nrcpt=1 (queue active)
- Oct 10 10:06:22 pro1 postfix/error[9543]: 80D28407F3: to=<blankaq7j0xzc@nyctodesign.com>, relay=none, delay=1187, delays=1187/0.13/0/0.05, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to nyctodesign.com[185.140.110.3]:25: Connection refused)
- Oct 10 10:26:22 pro1 postfix/qmgr[4820]: 80D28407F3: from=<>, size=4236, nrcpt=1 (queue active)
- Oct 10 10:26:22 pro1 postfix/error[12699]: 80D28407F3: to=<blankaq7j0xzc@nyctodesign.com>, relay=none, delay=2387, delays=2387/0.21/0/0.12, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to nyctodesign.com[185.140.110.3]:25: Connection refused)
- Oct 10 11:06:22 pro1 postfix/qmgr[4820]: 80D28407F3: from=<>, size=4236, nrcpt=1 (queue active)
- Oct 10 11:06:22 pro1 postfix/error[18383]: 80D28407F3: to=<blankaq7j0xzc@nyctodesign.com>, relay=none, delay=4787, delays=4787/0.24/0/0.06, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to nyctodesign.com[185.140.110.3]:25: Connection refused)
The sender was 20171010074635.80D28407F3@pro1.ows.hu "pro1.ows.hu is my panel domain"
if it were another virtual domain the sender was xxxxxx@anotherdomain.tld (at PHPmailer)
or full email address.My plugins:
ClamAV
CronJobs
DomainAutoApproval
LetsEncrypt
Mailgraph
OpenDKIM
PanelRedirect
PolicydSPF
Postgrey
RoundcubePlugins
SpamAssassinOpenDKIM is the new one
-
Sorry,
I found it.
A email account is full, and respond quota email, but the sender is "from=<>".
Why?
Thx
-
It is SpamAssassin config problem.
If the SpamAssassin get a SPAM mail, it is reply to sender, but the senders is fake.
How to I solve it?
-
Ok,
Just, I want to findt wich script it is!
But I have no idea
-
A mailq parancs után sokszor hosszú lista jelenik meg ilyenekből:
Code- -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------68CF14019B 2557 Mon Oct 9 10:11:18 MAILER-DAEMON (connect to kdemailblaster.com[185.140.110.3]:25: Connection refused) timotwm3nrsk@kdemailblaster.comDF92640281 2551 Mon Oct 9 10:12:19 MAILER-DAEMON (connect to kdemailblaster.com[185.140.110.3]:25: Connection refused) kornelz8nx952@kdemailblaster.com76EB1401B5 3518 Mon Oct 9 10:01:20 MAILER-DAEMON (connect to karimiskincenter.com[185.140.110.3]:25: Connection refused) fabianha4y1mwmarianna@karimiskincenter.comC46B340226 2563 Mon Oct 9 10:12:18 MAILER-DAEMON (connect to kdemailblaster.com[185.140.110.3]:25: Connection refused) akosakw3640@kdemailblaster.com-- 16 Kbytes in 4 Requests.
Az egyiket kilistáztam a cat /var/log/mail.log|grep "68CF14019B" paranccsal:Code: mail.log- cat /var/log/mail.log|grep "68CF14019B"
- Oct 9 10:11:18 pro1 postfix/pickup[3117]: 68CF14019B: uid=999 from=<>
- Oct 9 10:11:18 pro1 postfix/cleanup[663]: 68CF14019B: message-id=<dovecot-1507536678-232424-0@pro1.ows.hu>
- Oct 9 10:11:19 pro1 opendkim[1446]: 68CF14019B: DKIM-Signature field added (s=mail, d=ows.hu)
- Oct 9 10:11:19 pro1 postfix/qmgr[4820]: 68CF14019B: from=<>, size=2557, nrcpt=1 (queue active)
- Oct 9 10:11:19 pro1 postfix/smtp[3717]: 68CF14019B: to=<timotwm3nrsk@kdemailblaster.com>, relay=none, delay=0.95, delays=0.91/0.02/0.02/0, dsn=4.4.1, status=deferred (connect to kdemailblaster.com[185.140.110.3]:25: Connection refused)
- Oct 9 10:16:22 pro1 postfix/qmgr[4820]: 68CF14019B: from=<>, size=2557, nrcpt=1 (queue active)
- Oct 9 10:16:23 pro1 postfix/smtp[4379]: 68CF14019B: to=<timotwm3nrsk@kdemailblaster.com>, relay=none, delay=305, delays=305/0.03/0.02/0, dsn=4.4.1, status=deferred (connect to kdemailblaster.com[185.140.110.3]:25: Connection refused)
Mi a fene küldi ezeket a leveleket, és hogy tudom eltüntetni?
-
The restart script same the monit. It is monitoring services and restart if required.
The problem was with badbots.
I improved the fail2ban config.
It was soved.Thanks
-
-
Hi,
I am use Debian 8.9 Jessie
IMSCP 1.5.1 PHP-FPM5.6
Sometimes apache response time is more then 10 seconds and frozen. I created a script for restart apache, when the response time higher 10 seconds. It was work, but It is not finaly solve.
The realy problem is with PHP-FPM5.6 memory usage.
I attached atop view.process_view.pnguser_view.png
Thanks -
Yes, thanks again!