[+] Postix i serwer wysy

Konfiguracja serwerów, usług, itp.
Awatar użytkownika
rmika
Beginner
Posty: 117
Rejestracja: 14 czerwca 2007, 08:55

[+] Postix i serwer wysyła spam, czy błędna konfiguracja?

Post autor: rmika »

Ostatnio w logach ciągle mam coś takiego:

Kod: Zaznacz cały

Apr 22 13:40:37 Ksenia postfix/smtp[5113]: 9221A7402C: to=<freakpower@excite.co.jp>, relay=mx.excite.co.jp[180.235.96.64]:25, delay=102636, delays=102633/0.71/1.8/0, ds
n=4.4.2, status=deferred (lost connection with mx.excite.co.jp[180.235.96.64] while receiving the initial server greeting)
Apr 22 13:40:37 Ksenia postfix/smtp[5114]: 5484C74006: host idcmail-mx1so.cg.shawcable.net[24.71.223.11] refused to talk to me: 554-idcmail.shaw.ca 554 Your connection
from 83.19.68.26 has been rejected due to poor reputation.
Apr 22 13:40:38 Ksenia postfix/smtp[5114]: 5484C74006: to=<andy8cbr@shaw.ca>, relay=idcmail-mx2no.cg.shawcable.net[64.59.134.8]:25, delay=102757, delays=102754/0.74/2.3
/0, dsn=4.0.0, status=deferred (host idcmail-mx2no.cg.shawcable.net[64.59.134.8] refused to talk to me: 554-idcmail.shaw.ca 554 Your connection from 83.19.68.26 has bee
n rejected due to poor reputation.)
Apr 22 13:40:38 Ksenia postfix/smtp[5101]: B462074026: to=<freakyc_74@juno.com>, relay=mx.dca.untd.com[64.136.44.37]:25, delay=102638, delays=102634/0.86/2.7/0, dsn=4.0
.0, status=deferred (host mx.dca.untd.com[64.136.44.37] refused to talk to me: 550 IP 83.19.68.26 in zen.spamhaus.org : Access Denied, please see www.spamhaus.org )
Apr 22 13:40:38 Ksenia postfix/smtp[5104]: 65F6174005: to=<andyakalife@juno.com>, relay=mx.vgs.untd.com[64.136.52.37]:25, delay=102794, delays=102790/0.4/3.2/0, dsn=4.0
.0, status=deferred (host mx.vgs.untd.com[64.136.52.37] refused to talk to me: 550 IP 83.19.68.26 in zen.spamhaus.org : Access Denied, please see www.spamhaus.org )
Apr 22 13:40:40 Ksenia postfix/smtp[5109]: 21E7D7400E: to=<andy_jpt@ac.auone-net.jp>, relay=mx.ac.auone-net.jp[210.141.108.179]:25, delay=102791, delays=102786/0.6/1.6/
3.3, dsn=4.0.0, status=deferred (host mx.ac.auone-net.jp[210.141.108.179] said: 450 <du26.internetdsl.tpnet.pl[83.19.68.26]>: Client host rejected: sigh (in reply to RC
PT TO command))
Apr 22 13:40:56 Ksenia postfix/smtp[5097]: connect to mail.kobaltmusic.be[194.73.110.26]:25: Connection timed out
Apr 22 13:40:56 Ksenia postfix/smtp[5100]: connect to mail.kobaltmusic.be[194.73.110.26]:25: Connection timed out
Apr 22 13:40:56 Ksenia postfix/smtp[5097]: 390957403B: to=<hegifcnpel@kobaltmusic.be>, relay=none, delay=102487, delays=102466/0.27/21/0, dsn=4.4.1, status=deferred (co
nnect to mail.kobaltmusic.be[194.73.110.26]:25: Connection timed out)
Apr 22 13:40:56 Ksenia postfix/smtp[5100]: 34BE974021: to=<jgiwdtmblw@kobaltmusic.be>, relay=none, delay=102001, delays=101980/0.32/21/0, dsn=4.4.1, status=deferred (co
nnect to mail.kobaltmusic.be[194.73.110.26]:25: Connection timed out)
Apr 22 13:40:56 Ksenia postfix/smtp[5089]: connect to mx1.gmmail.com[10.42.23.11]:25: Connection timed out
Apr 22 13:40:56 Ksenia postfix/smtp[5089]: 5955874042: to=<erickmotagonzalez@gmmail.com>, relay=none, delay=102369, delays=102348/0.77/21/0, dsn=4.4.1, status=deferred
(connect to mx1.gmmail.com[10.42.23.11]:25: Connection timed out)
Apr 22 13:43:55 Ksenia postfix/scache[5117]: statistics: start interval Apr 22 13:40:35
Apr 22 13:43:55 Ksenia postfix/scache[5117]: statistics: domain lookup hits=0 miss=3 success=0%
Apr 22 13:43:55 Ksenia postfix/scache[5117]: statistics: address lookup hits=0 miss=4 success=0%
Apr 22 13:50:34 Ksenia postfix/qmgr[5029]: 2D9C37400F: from=<uvcek@carlsbergboy.be>, size=1883, nrcpt=1 (queue active)
Apr 22 13:50:36 Ksenia postfix/smtp[5125]: 2D9C37400F: to=<dim@bboa.com>, relay=smtp.getontheweb.com[66.36.236.47]:25, delay=103265, delays=103263/0.06/1.5/0.29, dsn=2.
0.0, status=sent (250 ok 1303456302 qp 50917)
Apr 22 13:50:36 Ksenia postfix/qmgr[5029]: 2D9C37400F: removed
Czy to oznacza, że mój serwer wysyła spam?

main.cf

Kod: Zaznacz cały

command_directory = /usr/sbin
mail_owner = postfix
mydomain = gocz.info
myhostname = ksenia.gocz.info
myorigin = $mydomain
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mydestination =  $mydomain, $myhostname, localhost, localhost.localdomain
mynetworks = 192.168.2.0/24, 127.0.0.0/8
inet_interfaces = all
inet_protocols = ipv4
home_mailbox = Maildir/
mail_spool_directory = /home/
smtpd_banner = ESMTP on $myhostname !
mailbox_size_limit = 0
recipient_delimiter = +
biff = no
append_dot_mydomain = no
relay_domains = $mydestination
smtpd_helo_required = yes

smtpd_recipient_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_unauth_destination,
    reject_unknown_recipient_domain,
    reject_non_fqdn_recipient

smtpd_client_restrictions =
    permit_sasl_authenticated,
    #reject_unknown_client,
    reject_rbl_client dul.dnsbl.sorbs.net,
    reject_rbl_client list.dsbl.org,
    reject_rbl_client sbl.spamhaus.org,
    reject_rbl_client cbl.abuseat.org

smtpd_sender_restrictions =
    permit_sasl_authenticated,
    reject_unknown_sender_domain,
    reject_non_fqdn_sender,
    reject_unknown_address

#AUTH SMTP
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain = $myhostname

#TLS
smtpd_tls_auth_only = yes
smtp_use_tls = yes
smtpd_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/mail.pem
smtpd_tls_cert_file = /etc/postfix/ssl/mail.pem
smtpd_tls_CAfile = /etc/postfix/ssl/mail.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
tls_random_source = dev:/dev/urandom

Gdzie mam błędy w konfiguracji?
Awatar użytkownika
grzesiek
Junior Member
Posty: 932
Rejestracja: 06 stycznia 2008, 10:41
Lokalizacja: Białystok

Post autor: grzesiek »

Chyba musisz ustawić

Kod: Zaznacz cały

relay_domains = $mydestination
na

Kod: Zaznacz cały

relay_domains =
Nie widzę relayhost ale on domyślnie jest pusty.
Awatar użytkownika
rmika
Beginner
Posty: 117
Rejestracja: 14 czerwca 2007, 08:55

Post autor: rmika »

Zmieniłem ale to nie pomogło. Dalej w logach dostaję:

Kod: Zaznacz cały

Apr 23 00:03:16 Ksenia postfix/smtp[5770]: BC74974009: host mx-ironport.core.plus.net[84.92.1.97] refused to talk to me: 554-mx.ptn-ipin01.plus.net 554 Your access to t
his mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alte
rnate means.
Apr 23 00:03:16 Ksenia postfix/smtp[5746]: 7192E7401B: to=<dillon286785@bellsouth.net>, relay=gateway-f1.isp.att.net[204.127.217.16]:25, delay=140034, delays=140032/0.7
5/0.82/0, dsn=4.0.0, status=deferred (host gateway-f1.isp.att.net[204.127.217.16] refused to talk to me: 550-83.19.68.26 blocked by ldap :o u=rblmx,dc=att,dc=net 550 Erro
r - Blocked for abuse. See http://att.net/blocks)
Apr 23 00:03:16 Ksenia postfix/smtp[5745]: B7A6074037: to=<frchjackson1@cox.net>, relay=mx.east.cox.net[68.1.17.3]:25, delay=139991, delays=139989/0.91/0.69/0, dsn=4.0.
0, status=deferred (host mx.east.cox.net[68.1.17.3] refused to talk to me: 554 eastrmimpi01.cox.net IMP 83.19.68.26 blocked.  Error Code: CXBL - Refer to Error Codes se
ction at http://postmaster.cox.net/confluence/display/postmaster/Error+Codes for more information.)
Apr 23 00:03:16 Ksenia postfix/smtp[5767]: 5484C74006: host idcmail.shaw.ca[64.59.134.8] refused to talk to me: 554-idcmail.shaw.ca 554 Your connection from 83.19.68.26
 has been rejected due to poor reputation.
Apr 23 00:03:16 Ksenia postfix/smtp[5761]: 220F37403A: to=<caser@rokki.net>, relay=mx.kolumbus.fi[193.229.5.160]:25, delay=139771, delays=139769/0.65/1.2/0, dsn=4.7.1,
status=deferred (host mx.kolumbus.fi[193.229.5.160] refused to talk to me: 554 5.7.1 <du26.internetdsl.tpnet.pl[83.19.68.26]>: Client host rejected: No mail accepted fr
om you)
Apr 23 00:03:16 Ksenia postfix/smtp[5757]: certificate verification failed for mail.ukinet.co.uk[174.138.168.107]:25: self-signed certificate
Apr 23 00:03:16 Ksenia postfix/smtp[5770]: BC74974009: host mx-ironport.last.plus.net[84.92.1.65] refused to talk to me: 554-mx.pcl-ipin01.plus.net 554 Your access to t
his mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alte
rnate means.
Apr 23 00:03:16 Ksenia postfix/smtp[5767]: 5484C74006: host idcmail-mx1so.cg.shawcable.net[24.71.223.11] refused to talk to me: 554-idcmail.shaw.ca 554 Your connection from 83.19.68.26 has been rejected due to poor reputation.
Apr 23 00:03:17 Ksenia postfix/smtp[5741]: E379738741: to=<vsawyegabv@pepinieresbonnet.be>, relay=mail-IN.bipweb.be[217.112.180.10]:25, delay=111971, delays=111969/0.22/1.9/0.14, dsn=5.0.0, status=bounced (host mail-IN.bipweb.be[217.112.180.10] said: 550 No such domain at this location (vsawyegabv@pepinieresbonnet.be) (in reply to RCPT TO command))
Apr 23 00:03:17 Ksenia postfix/smtp[5750]: 3301274017: to=<wgdacikqoywce@pepinieresbonnet.be>, relay=mail-IN.bipweb.be[217.112.180.10]:25, delay=140076, delays=140074/0.4/1.7/0.14, dsn=5.0.0, status=bounced (host mail-IN.bipweb.be[217.112.180.10] said: 550 No such domain at this location (wgdacikqoywce@pepinieresbonnet.be) (in reply to RCPT TO command))
Apr 23 00:03:17 Ksenia postfix/qmgr[5721]: E379738741: removed
Apr 23 00:03:17 Ksenia postfix/smtp[5755]: 65F6174005: host mx.dca.untd.com[64.136.44.37] refused to talk to me: 550 IP 83.19.68.26 in zen.spamhaus.org : Access Denied, please see www.spamhaus.org
Apr 23 00:03:17 Ksenia postfix/smtp[5772]: B462074026: host mx.dca.untd.com[64.136.44.37] refused to talk to me: 550 IP 83.19.68.26 in zen.spamhaus.org : Access Denied, please see www.spamhaus.org
Apr 23 00:03:17 Ksenia postfix/qmgr[5721]: 3301274017: removed
Apr 23 00:03:17 Ksenia postfix/smtp[5770]: BC74974009: to=<andy@andyhamilton.org.uk>, relay=mx-ironport.last.plus.net[84.92.1.97]:25, delay=140121, delays=140118/0.88/1.6/0, dsn=4.0.0, status=deferred (host mx-ironport.last.plus.net[84.92.1.97] refused to talk to me: 554-mx.ptn-ipin02.plus.net 554 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means.)
Apr 23 00:03:17 Ksenia postfix/smtp[5767]: 5484C74006: to=<andy8cbr@shaw.ca>, relay=idcmail-mx2no.cg.shawcable.net[64.59.134.8]:25, delay=140116, delays=140114/0.8/1.8/0, dsn=4.0.0, status=deferred (host idcmail-mx2no.cg.shawcable.net[64.59.134.8] refused to talk to me: 554-idcmail.shaw.ca 554 Your connection from 83.19.68.26 has been rejected due to poor reputation.)
Apr 23 00:03:18 Ksenia postfix/smtp[5738]: EB8A93875C: host mx1.nfz.gov.pl[194.50.61.131] refused to talk to me: 554-mx1.nfz.gov.pl 554 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means.
Apr 23 00:03:18 Ksenia postfix/smtp[5773]: BB417386E8: host smtp.telenet-ops.be[195.130.137.65] refused to talk to me: 421 beatrice.telenet-ops.be bizsmtp 83.19.68.26 sorry, you have temporarily been blacklisted
Awatar użytkownika
grzesiek
Junior Member
Posty: 932
Rejestracja: 06 stycznia 2008, 10:41
Lokalizacja: Białystok

Post autor: grzesiek »

Kod: Zaznacz cały

smtpd_client_restrictions =
    permit_sasl_authenticated,
    #reject_unknown_client,
Czemu nie używasz reject_unknown_client? Spróbuj dodać jeszcze reject_unauth_destination.
Awatar użytkownika
rmika
Beginner
Posty: 117
Rejestracja: 14 czerwca 2007, 08:55

Post autor: rmika »

W sumie to przy mojej wersji postfiksa powinno być:

Kod: Zaznacz cały

reject_unknown_client_hostname
A poza tym nie wiem, czy to mi pomoże bo domyślne parę osób będzie łączyło się z domu. I ciężko będzie odgórne definiowanie IP, hostów.

Zastanawiam się dlaczego nie działa mi autoryzacja SMTP?
Awatar użytkownika
grzesiek
Junior Member
Posty: 932
Rejestracja: 06 stycznia 2008, 10:41
Lokalizacja: Białystok

Post autor: grzesiek »

Za autoryzację odpowiada Dovecot, może tam coś jest nie tak. Wcześniej wszystko było dobrze, czy to świeży serwer?
Awatar użytkownika
rmika
Beginner
Posty: 117
Rejestracja: 14 czerwca 2007, 08:55

Post autor: rmika »

Łącząc się poprzez telnet bez autoryzacji to nie wyśle maila. Jak się autoryzuje:

Kod: Zaznacz cały

auth login
to wyśle maila.

T
ylko, że ciągle w logach mam:

Kod: Zaznacz cały

Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: 6299074032: from=<ifhah@outingent.be>, size=1902, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: 65F6174005: from=<alexashjua@marking.be>, size=1877, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: 615F174046: from=<>, size=3914, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: 220F37403A: from=<dayvcqsuncvc@klinkerfoto.be>, size=1870, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: 21E7D7400E: from=<dagagio@blattgold.de>, size=1890, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: 252DD74029: from=<>, size=4002, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: 77AD57402B: from=<>, size=4362, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: 7192E7401B: from=<uexvwhtatib@carmate.be>, size=1907, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: 9221A7402C: from=<aecrgitmbvg@klinkerfoto.be>, size=1884, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: 9D5F87404B: from=<>, size=4006, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: 512BE74023: from=<yroqacjyvkq@kobaltmusic.be>, size=1883, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: 5955874042: from=<kpatv@ozmos.be>, size=1905, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: B7A6074037: from=<mrkijkrcmxq@kobaltmusic.be>, size=1893, nrcpt=1 (queue active)
Apr 25 01:07:34 Ksenia postfix/qmgr[8246]: B462074026: from=<ouncvkmayv@godfather.be>, size=1877, nrcpt=1 (queue active)
Apr 25 01:07:36 Ksenia postfix/smtp[8266]: A072374034: host mx.west.cox.net[68.6.19.3] refused to talk to me: 554 fed1rmimpi05.cox.net IMP 83.19.68.26 blocked.  Error C
ode: CXBL - Refer to Error Codes section at http://postmaster.cox.net/confluence/display/postmaster/Error+Codes for more information.
Apr 25 01:07:36 Ksenia postfix/smtp[8279]: 512BE74023: host mx01.t-online.de[194.25.134.72] refused to talk to me: 554 IP:83.19.68.26 - A problem occurred. (Ask your po
stmaster for help or to contact tosa@rx.t-online.de to clarify.) (BL)
Apr 25 01:07:36 Ksenia postfix/smtp[8281]: B7A6074037: host mx.east.cox.net[68.1.17.3] refused to talk to me: 554 eastrmimpi04.cox.net IMP 83.19.68.26 blocked.  Error C
ode: CXBL - Refer to Error Codes section at http://postmaster.cox.net/confluence/display/postmaster/Error+Codes for more information.
Apr 25 01:07:36 Ksenia postfix/smtp[8279]: 512BE74023: host mx00.t-online.de[194.25.134.8] refused to talk to me: 554 IP:83.19.68.26 - A problem occurred. (Ask your pos
tmaster for help or to contact tosa@rx.t-online.de to clarify.) (BL)
Apr 25 01:07:37 Ksenia postfix/smtp[8279]: 512BE74023: host mx02.t-online.de[194.25.134.9] refused to talk to me: 554 IP:83.19.68.26 - A problem occurred. (Ask your pos
tmaster for help or to contact tosa@rx.t-online.de to clarify.) (BL)
Apr 25 01:07:37 Ksenia postfix/smtp[8266]: A072374034: to=<casey_22@cox.net>, relay=mx.east.cox.net[68.1.17.3]:25, delay=316439, delays=316436/0.12/2.9/0, dsn=4.0.0, st
atus=deferred (host mx.east.cox.net[68.1.17.3] refused to talk to me: 554 eastrmimpi03.cox.net IMP 83.19.68.26 blocked.  Error Code: CXBL - Refer to Error Codes section
 at http://postmaster.cox.net/confluence/display/postmaster/Error+Codes for more information.)
Apr 25 01:07:37 Ksenia postfix/smtp[8281]: B7A6074037: to=<frchjackson1@cox.net>, relay=mx.west.cox.net[68.6.19.3]:25, delay=316652, delays=316649/0.47/2.7/0, dsn=4.0.0
, status=deferred (host mx.west.cox.net[68.6.19.3] refused to talk to me: 554 fed1rmimpi04.cox.net IMP 83.19.68.26 blocked.  Error Code: CXBL - Refer to Error Codes sec
tion at http://postmaster.cox.net/confluence/display/postmaster/Error+Codes for more information.)
Apr 25 01:07:37 Ksenia postfix/smtp[8272]: 220F37403A: to=<caser@rokki.net>, relay=mx.kolumbus.fi[193.229.5.160]:25, delay=316432, delays=316429/0.29/2.9/0, dsn=4.7.1, status=deferred (host mx.kolumbus.fi[193.229.5.160] refused to talk to me: 554 5.7.1 <du26.internetdsl.tpnet.pl[83.19.68.26]>: Client host rejected: No mail accepted from you)
Apr 25 01:07:38 Ksenia postfix/smtp[8279]: 512BE74023: to=<freakzoid@t-online.de>, relay=mx03.t-online.de[194.25.134.73]:25, delay=316658, delays=316655/0.42/3.4/0, dsn=4.0.0, status=deferred (host mx03.t-online.de[194.25.134.73] refused to talk to me: 554 IP:83.19.68.26 - A problem occurred. (Ask your postmaster for help or to contact tosa@rx.t-online.de to clarify.) (BL))


Dodane:
Z
araz, ale wpis w logu:

Kod: Zaznacz cały

postfix/qmgr
sugeruje, że mam zaległe maile w kolejce i właśnie te maile zaśmiecają log.

U
sunę kolejkę i zobaczę czy dalej będzie spam.
Awatar użytkownika
grzesiek
Junior Member
Posty: 932
Rejestracja: 06 stycznia 2008, 10:41
Lokalizacja: Białystok

Post autor: grzesiek »

Może coś i w tym jest, bo w tych logach tylko nieliczne są wysyłane "status=sent" ale większość z nich jest przekazywana "relay=mx.dca.untd.com[64.136.44.37]:25" co nie powinno mieć miejsca.
Masz dużo wiadomości ze statusem odroczony "status=deferred", coś mi się wydaje że to zasługa (pozytywna) list RBL.
Awatar użytkownika
rmika
Beginner
Posty: 117
Rejestracja: 14 czerwca 2007, 08:55

Post autor: rmika »

Uważam, że:

Kod: Zaznacz cały

relay=mx.dca.untd.com[64.136.44.37]:25
oznacza, że wiadomość została przekazana na wymieniony serwer i ten serwer ją odrzucił. Dla przykładu, jak wysyłam coś na/do gmail to w logach znajduję się:

Kod: Zaznacz cały

relay=gmail-smtp-in.l.google.com[74.125.79.27]:25
No a ten status to jak twierdzisz będzie zasługa list RBL.

W podsumowaniu najprawdopodobniej przyczyną całego zamieszania było bezgraniczne zaufanie do własnej sieci. Po wyłączeniu w konfiguracji opcji:

Kod: Zaznacz cały

permit_mynetworks
oraz ustawieniu:

Kod: Zaznacz cały

  relay_domains =
serwer już nie wysyła spamu (i mam nadzieję, że taka sytuacja już nie wystąpi).
Awatar użytkownika
rmika
Beginner
Posty: 117
Rejestracja: 14 czerwca 2007, 08:55

postfix, próby wysłania/przekazania poczty przez spamerów

Post autor: rmika »

Witam.
Mam takie jeszcze pytanie, czy normalną sytuacją jest, że w ciągu dwóch godzin na serwer przyszło 7500 prób wysłania/przekazania poczty. Oczywiście moja konfiguracja blokuje te maile ale...
Załącznik mailgraph.cgi.png nie jest już dostępny

Czy takie coś jest normalne i czy można z tym jakoś walczyć?
Załączniki
mailgraph.cgi.png
ODPOWIEDZ