16.06.2022, 17:02
Hey Freunde,
Ich habe mir vor monaten einen eigenen Mail-Server eingerichtet und bastel auch fleißig weiter an diesem rum.
Mir ist vor ein paar Tagen, sowie heute etwas aufgefallen, was miteinander zu tun haben könnte:
Am Dienstag habe ich über Nacht 400 Emails im Postfach mit "Konnte nicht übermittelt werden". Da hat jemand über mein SMTP Spam Mails in hülle und fülle über Nacht rausgehauen.
Das konnte ich soweit beheben, indem ich STARTTLS komplett für den SMTP Server deaktivierte.
Jetzt ist mir jedoch im Mail log etwas aufgefallen, was mir nicht gefällt und Dr. Google auch nicht bei weiterhelfen kann ._.
Der Log (IP's sind durch "XXXXXX" verschleiert")
Ich habe mir vor monaten einen eigenen Mail-Server eingerichtet und bastel auch fleißig weiter an diesem rum.
Mir ist vor ein paar Tagen, sowie heute etwas aufgefallen, was miteinander zu tun haben könnte:
Am Dienstag habe ich über Nacht 400 Emails im Postfach mit "Konnte nicht übermittelt werden". Da hat jemand über mein SMTP Spam Mails in hülle und fülle über Nacht rausgehauen.
Das konnte ich soweit beheben, indem ich STARTTLS komplett für den SMTP Server deaktivierte.
Jetzt ist mir jedoch im Mail log etwas aufgefallen, was mir nicht gefällt und Dr. Google auch nicht bei weiterhelfen kann ._.
Der Log (IP's sind durch "XXXXXX" verschleiert")
Code:
Jun 16 17:26:49 mail postfix/submission/smtpd[113759]: connect from XXXXXX
Jun 16 17:26:53 mail postfix/smtpd[117209]: name_mask: all
Jun 16 17:26:53 mail postfix/smtpd[117209]: inet_addr_local: configured 2 IPv4 addresses
Jun 16 17:26:53 mail postfix/smtpd[117209]: inet_addr_local: configured 3 IPv6 addresses
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: process generation: 305 (305)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? debug_peer_list
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? fast_flush_domains
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? mynetworks
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? permit_mx_backup_networks
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? qmqpd_authorized_clients
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? relay_domains
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? smtpd_access_maps
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_list_match: smtpd_client_event_limit_exceptions: no match
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: mynetworks ~? debug_peer_list
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: mynetworks ~? fast_flush_domains
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: mynetworks ~? mynetworks
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: name_mask: host
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: been_here: XXXX
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: been_here: XXXX
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: been_here: XXXX
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: been_here: XXXXX
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: been_here: XXXXX
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: mynetworks_core: XXXXX
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: mynetworks ~? debug_peer_list
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: mynetworks ~? fast_flush_domains
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: mynetworks ~? mynetworks
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: relay_domains ~? debug_peer_list
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: relay_domains ~? fast_flush_domains
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: relay_domains ~? mynetworks
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: relay_domains ~? permit_mx_backup_networks
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: relay_domains ~? qmqpd_authorized_clients
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: relay_domains ~? relay_domains
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: permit_mx_backup_networks ~? debug_peer_list
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: permit_mx_backup_networks ~? fast_flush_domains
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: permit_mx_backup_networks ~? mynetworks
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: permit_mx_backup_networks ~? permit_mx_backup_networks
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: connect to subsystem private/proxymap
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr request = open
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr table = unix:passwd.byname
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr flags = 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: flags
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: flags
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 16
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: (list terminator)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: (end)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_proxy_open: connect to map=unix:passwd.byname status=0 server_flags=fixed
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_open: proxy:unix:passwd.byname
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: Compiled against Berkeley DB: 5.3.28?
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: Run-time linked against Berkeley DB: 5.3.28?
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_open: hash:/etc/aliases
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr request = open
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr table = mysql:/etc/postfix/sql/mysql_virtual_alias_maps.cf
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr flags = 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: flags
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: flags
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 524368
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: (list terminator)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: (end)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_proxy_open: connect to map=mysql:/etc/postfix/sql/mysql_virtual_alias_maps.cf status=0 server_flags=fixed|lock|utf8_request
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_open: proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_maps.cf
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr request = open
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr table = mysql:/etc/postfix/sql/mysql_virtual_alias_domain_maps.cf
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr flags = 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: flags
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: flags
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 524368
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: (list terminator)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: (end)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_proxy_open: connect to map=mysql:/etc/postfix/sql/mysql_virtual_alias_domain_maps.cf status=0 server_flags=fixed|lock|utf8_request
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_open: proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_maps.cf
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr request = open
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr table = mysql:/etc/postfix/sql/mysql_virtual_alias_domain_catchall_maps.cf
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr flags = 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: flags
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: flags
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 524368
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: (list terminator)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: (end)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_proxy_open: connect to map=mysql:/etc/postfix/sql/mysql_virtual_alias_domain_catchall_maps.cf status=0 server_flags=fixed|lock|utf8_request
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_open: proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_catchall_maps.cf
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr request = open
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr table = mysql:/etc/postfix/sql/mysql_virtual_mailbox_maps.cf
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr flags = 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: flags
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: flags
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 16
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: (list terminator)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: (end)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_proxy_open: connect to map=mysql:/etc/postfix/sql/mysql_virtual_mailbox_maps.cf status=0 server_flags=fixed
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_open: proxy:mysql:/etc/postfix/sql/mysql_virtual_mailbox_maps.cf
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr request = open
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr table = mysql:/etc/postfix/sql/mysql_virtual_alias_domain_mailbox_maps.cf
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr flags = 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: flags
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: flags
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 16
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/proxymap socket: wanted attribute: (list terminator)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: (end)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_proxy_open: connect to map=mysql:/etc/postfix/sql/mysql_virtual_alias_domain_mailbox_maps.cf status=0 server_flags=fixed
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_open: proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_mailbox_maps.cf
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? debug_peer_list
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? fast_flush_domains
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? mynetworks
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? permit_mx_backup_networks
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? qmqpd_authorized_clients
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? relay_domains
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? smtpd_access_maps
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: Compiled against Berkeley DB: XXX?
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: Run-time linked against Berkeley DB: XXX?
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: dict_open: hash:/etc/postfix/access
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: unknown_helo_hostname_tempfail_action = defer_if_permit
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: unknown_address_tempfail_action = defer_if_permit
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: unverified_recipient_tempfail_action = defer_if_permit
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: unverified_sender_tempfail_action = defer_if_permit
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: name_mask: 1
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: auto_clnt_create: transport=local endpoint=private/tlsmgr
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: auto_clnt_open: connected to private/tlsmgr
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr request = seed
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr size = 32
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/tlsmgr: wanted attribute: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/tlsmgr: wanted attribute: seed
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: seed
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: +Vg9dLOfSFPRXHpzKQptUMQJiKGWFKb0X7YA2g/b94M=
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/tlsmgr: wanted attribute: (list terminator)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: (end)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr request = policy
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr cache_type = smtpd
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/tlsmgr: wanted attribute: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/tlsmgr: wanted attribute: cachable
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: cachable
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 1
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/tlsmgr: wanted attribute: timeout
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: timeout
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 3600
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/tlsmgr: wanted attribute: (list terminator)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: (end)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: fast_flush_domains ~? debug_peer_list
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_string: parent_domain_matches_subdomains: fast_flush_domains ~? fast_flush_domains
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: auto_clnt_create: transport=local endpoint=private/anvil
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: connection established
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: master_notify: status 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: name_mask: resource
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: name_mask: software
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: connect from XXXX
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_list_match: XXXX: no match
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_list_match: XXXXX: no match
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_list_match: XXXXX: no match
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: match_list_match: XXXXX: no match
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: smtp_stream_setup: maxtime=300 enable_deadline=0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr request = seed
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: send attr size = 32
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/tlsmgr: wanted attribute: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: status
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: 0
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/tlsmgr: wanted attribute: seed
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: seed
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute value: FNLh2dqaX9+tBbOkzxbpR2xzS5TvL0g/kAbVbuL+tag=
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: private/tlsmgr: wanted attribute: (list terminator)
Jun 16 17:26:53 mail postfix/smtps/smtpd[117209]: input attribute name: (end)
Kann mir einer weiterhelfen? Ich hab das Gefühl, da sitzt einer auf meinem Server oder versucht Daten von meinem Server abzugreifen, kann es jedoch nicht ermitteln.