[Postfixbuch-users] Postfix und Fetchmail
Stefan Kremer
sk71 at gmx.de
Fr Mär 31 19:17:42 CEST 2006
Matthias Haegele schrieb:
>
>> In meiner log-Datei stand nämlich, daß EMails an die Empfänger geschickt
>> wurden, die unter X-Envelope-To eingetragen waren.
>
> Könntest Du vielleicht hier auch:
> postconf -n
> und die maillog posten
> oder hat sich das schon erledigt?.
nein, erledigt hat sich das noch nicht. bin immer noch nicht schlauer,
wieso mein system plötzlich zum spam-relay wurde und meine ip dann
letztendlich auch gesperrt wurde.
hier ein einzug aus der log-datei, der meiner meinung nach die
entscheidenden einträge enthält:
Mar 29 08:50:42 ik-www-01 amavis[912]: (00912-01) ESMTP::10024
/var/lib/amavis/amavis-20060329T085042-00912:
<catalinanolantin at yahoo.com> ->
<pmeijer at gmx.net>,<pml_wien at gmx.net>,<pohl-michael at gmx.net>,<poinegger at gmx.net>,<polleyc at gmx.net>,<polystar at gmx.net>,<portable_enhancements at gmx.net>,<potrc at gmx.net>,<pphoc at gmx.net>,<predwar at gmx.net>,<pregunter at gmx.net>,<prints at gmx.net>,<private.agent at gmx.net>,<procarion at gmx.net>,<promres at gmx.net>,<prosat at gmx.net>,<psyduck202 at gmx.net>,<puky at gmx.net>,<pure_logic at gmx.net>,<purplemania at gmx.net>,<purzelbc at gmx.net>,<puschl at gmx.net>,<pwch at gmx.net>,<py-ro at gmx.net>,<pyndar at gmx.net>,<qing at gmx.net>,<quakky at gmx.net>,<r.a.messenger at gmx.net>,<r.boehm at gmx.net>,<r.kellner at gmx.net>,<r.oth at gmx.net>,<r.rieves at gmx.net>,<r.weerts at gmx.net>,<r_stoebener at gmx.net>
Received: SIZE=3221 from localhost ([127.0.0.1]) by localhost (ik-www-01
[127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00912-01; Wed, 29
Mar 2006 08:50:42 +0200 (CEST)
Mar 29 08:50:42 ik-www-01 amavis[912]: (00912-01) body hash:
07690360378b68b38d6166ed620194d2
Mar 29 08:50:42 ik-www-01 amavis[912]: (00912-01) Checking:
<catalinanolantin at yahoo.com> ->
<pmeijer at gmx.net>,<pml_wien at gmx.net>,<pohl-michael at gmx.net>,<poinegger at gmx.net>,<polleyc at gmx.net>,<polystar at gmx.net>,<portable_enhancements at gmx.net>,<potrc at gmx.net>,<pphoc at gmx.net>,<predwar at gmx.net>,<pregunter at gmx.net>,<prints at gmx.net>,<private.agent at gmx.net>,<procarion at gmx.net>,<promres at gmx.net>,<prosat at gmx.net>,<psyduck202 at gmx.net>,<puky at gmx.net>,<pure_logic at gmx.net>,<purplemania at gmx.net>,<purzelbc at gmx.net>,<puschl at gmx.net>,<pwch at gmx.net>,<py-ro at gmx.net>,<pyndar at gmx.net>,<qing at gmx.net>,<quakky at gmx.net>,<r.a.messenger at gmx.net>,<r.boehm at gmx.net>,<r.kellner at gmx.net>,<r.oth at gmx.net>,<r.rieves at gmx.net>,<r.weerts at gmx.net>,<r_stoebener at gmx.net>
Mar 29 08:50:42 ik-www-01 amavis[912]: (00912-01) Connecting to SQL
database server
Mar 29 08:50:42 ik-www-01 amavis[912]: (00912-01) connect_to_sql:
'DBI:mysql:provider' succeeded
Mar 29 08:50:42 ik-www-01 amavis[912]: (00912-01) Checking for banned
MIME types and names
Mar 29 08:50:42 ik-www-01 amavis[912]: (00912-01) Checking for banned
(contents-based) file types, 1 parts
Mar 29 08:50:42 ik-www-01 amavis[912]: (00912-01) Using Clam
Antivirus-clamd: (built-in interface)
Mar 29 08:50:42 ik-www-01 amavis[912]: (00912-01) Clam Antivirus-clamd:
Connecting to socket /var/run/clamav/clamd.ctl
Mar 29 08:50:42 ik-www-01 amavis[912]: (00912-01) Clam Antivirus-clamd:
Sending CONTSCAN /var/lib/amavis/amavis-20060329T085042-00912/parts\n to
UNIX socket /var/run/clamav/clamd.ctl
Mar 29 08:50:42 ik-www-01 amavis[912]: (00912-01) Clam Antivirus-clamd
result: /var/lib/amavis/amavis-20060329T085042-00912/parts: OK\n
Mar 29 08:50:42 ik-www-01 amavis[912]: (00912-01) Using BitDefender:
/usr/bin/bdc --all --arc --mail
/var/lib/amavis/amavis-20060329T085042-00912/parts
Mar 29 08:50:44 ik-www-01 amavis[912]: (00912-01) run_av: /usr/bin/bdc
status=0 (0 ),BDC/Linux-Console v7.1 (build 2559) (i386) (Jul 6 2005
16:28:53)\nCopyright (C) 1996-2004 SOFTWIN SRL. All rights
reserved.\nWarning: unknown parameter: --all\n\n\n\nResults:\nFolders
...:1\nFiles ...:1\nPacked ...:0\nArchives ...:0\nInfected files
:0\nSuspect files ...:0\nWarnings ...:0\nI/O errors ...:0\n
Mar 29 08:51:00 ik-www-01 amavis[912]: (00912-01) spam_scan: hits=28.309
tests=BAYES_99,DNS_FROM_RFC_WHOIS,FORGED_YAHOO_RCVD,HTML_IMAGE_ONLY_16,HTML_IMAGE_RATIO_04,HTML_MESSAGE,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_BY_IP,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DSBL,RCVD_IN_NJABL_RELAY,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL
Mar 29 08:51:00 ik-www-01 amavis[912]: (00912-01) local delivery: <> ->
<spam-quarantine>,
mbx=/var/lib/amavis/virusmails/spam-07690360378b68b38d6166ed620194d2-20060329-085100-00912-01.gz
Mar 29 08:51:00 ik-www-01 amavis[912]: (00912-01) SPAM,
<catalinanolantin at yahoo.com> ->
<pmeijer at gmx.net>,<pml_wien at gmx.net>,<pohl-michael at gmx.net>,<poinegger at gmx.net>,<polleyc at gmx.net>,<polystar at gmx.net>,<portable_enhancements at gmx.net>,<potrc at gmx.net>,<pphoc at gmx.net>,<predwar at gmx.net>,<pregunter at gmx.net>,<prints at gmx.net>,<private.agent at gmx.net>,<procarion at gmx.net>,<promres at gmx.net>,<prosat at gmx.net>,<psyduck202 at gmx.net>,<puky at gmx.net>,<pure_logic at gmx.net>,<purplemania at gmx.net>,<purzelbc at gmx.net>,<puschl at gmx.net>,<pwch at gmx.net>,<py-ro at gmx.net>,<pyndar at gmx.net>,<qing at gmx.net>,<quakky at gmx.net>,<r.a.messenger at gmx.net>,<r.boehm at gmx.net>,<r.kellner at gmx.net>,<r.oth at gmx.net>,<r.rieves at gmx.net>,<r.weerts at gmx.net>,<r_stoebener at gmx.net>,
Yes, hits=28.3 tag1=-1000.0 tag2=5.0 kill=10.0 tests=BAYES_99,
DNS_FROM_RFC_WHOIS, FORGED_YAHOO_RCVD, HTML_IMAGE_ONLY_16,
HTML_IMAGE_RATIO_04, HTML_MESSAGE, MIME_HTML_ONLY,
RAZOR2_CF_RANGE_51_100, RAZOR2_CHECK, RCVD_BY_IP,
RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_DSBL, RCVD_IN_NJABL_RELA...
Mar 29 08:51:00 ik-www-01 amavis[912]: (00912-01) ...Y, RCVD_IN_XBL,
URIBL_AB_SURBL, URIBL_OB_SURBL, URIBL_SC_SURBL, URIBL_WS_SURBL,
quarantine
spam-07690360378b68b38d6166ed620194d2-20060329-085100-00912-01
(spam-quarantine)
Mar 29 08:51:00 ik-www-01 amavis[912]: (00912-01) SEND via SMTP:
[127.0.0.1]:10025 <> -> <postmaster at ik-it.com>
Mar 29 08:51:00 ik-www-01 postfix/smtpd[969]: connect from
localhost[127.0.0.1]
Mar 29 08:51:00 ik-www-01 postfix/smtpd[969]: 3650A2753:
client=localhost[127.0.0.1]
Mar 29 08:51:00 ik-www-01 postfix/cleanup[958]: 3650A2753:
message-id=<SA00912-01 at ik-www-01>
Mar 29 08:51:00 ik-www-01 postfix/qmgr[23861]: 3650A2753: from=<>,
size=6788, nrcpt=1 (queue active)
Mar 29 08:51:00 ik-www-01 postfix/smtpd[969]: disconnect from
localhost[127.0.0.1]
Mar 29 08:51:00 ik-www-01 postfix/virtual[972]: 3650A2753:
to=<info at ik-it.com>, orig_to=<postmaster at ik-it.com>, relay=virtual,
delay=0, status=sent (delivered to maildir)
Mar 29 08:51:00 ik-www-01 postfix/qmgr[23861]: 3650A2753: removed
Mar 29 08:51:00 ik-www-01 amavis[912]: (00912-01) mail_via_smtp: 250
2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 3650A2753
Mar 29 08:51:00 ik-www-01 amavis[912]: (00912-01) headers CLUSTERING:
done all 34 recips in one go
Mar 29 08:51:00 ik-www-01 amavis[912]: (00912-01) FWD via SMTP:
[127.0.0.1]:10025 <catalinanolantin at yahoo.com> ->
<pmeijer at gmx.net>,<pml_wien at gmx.net>,<pohl-michael at gmx.net>,<poinegger at gmx.net>,<polleyc at gmx.net>,<polystar at gmx.net>,<portable_enhancements at gmx.net>,<potrc at gmx.net>,<pphoc at gmx.net>,<predwar at gmx.net>,<pregunter at gmx.net>,<prints at gmx.net>,<private.agent at gmx.net>,<procarion at gmx.net>,<promres at gmx.net>,<prosat at gmx.net>,<psyduck202 at gmx.net>,<puky at gmx.net>,<pure_logic at gmx.net>,<purplemania at gmx.net>,<purzelbc at gmx.net>,<puschl at gmx.net>,<pwch at gmx.net>,<py-ro at gmx.net>,<pyndar at gmx.net>,<qing at gmx.net>,<quakky at gmx.net>,<r.a.messenger at gmx.net>,<r.boehm at gmx.net>,<r.kellner at gmx.net>,<r.oth at gmx.net>,<r.rieves at gmx.net>,<r.weerts at gmx.net>,<r_stoebener at gmx.net>
Mar 29 08:51:00 ik-www-01 postfix/smtpd[969]: connect from
localhost[127.0.0.1]
Mar 29 08:51:00 ik-www-01 postfix/smtpd[969]: 62FF62753:
client=localhost[127.0.0.1]
Mar 29 08:51:00 ik-www-01 postfix/cleanup[958]: 62FF62753:
message-id=<E6OOOR7-0000Bt-IQcatalinanolantin at yahoo.com>
Mar 29 08:51:00 ik-www-01 postfix/qmgr[23861]: 62FF62753:
from=<catalinanolantin at yahoo.com>, size=3600, nrcpt=34 (queue active)
Mar 29 08:51:00 ik-www-01 postfix/virtual[972]: 62FF62753:
to=<gmx at ik-ac-lan1.local>, orig_to=<private.agent at gmx.net>,
relay=virtual, delay=0, status=sent (delivered to maildir)
Mar 29 08:51:00 ik-www-01 postfix/smtpd[969]: disconnect from
localhost[127.0.0.1]
Mar 29 08:51:00 ik-www-01 amavis[912]: (00912-01) mail_via_smtp: 250
2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753
Mar 29 08:51:00 ik-www-01 amavis[912]: (00912-01) Passed,
<catalinanolantin at yahoo.com> ->
<pmeijer at gmx.net>,<pml_wien at gmx.net>,<pohl-michael at gmx.net>,<poinegger at gmx.net>,<polleyc at gmx.net>,<polystar at gmx.net>,<portable_enhancements at gmx.net>,<potrc at gmx.net>,<pphoc at gmx.net>,<predwar at gmx.net>,<pregunter at gmx.net>,<prints at gmx.net>,<private.agent at gmx.net>,<procarion at gmx.net>,<promres at gmx.net>,<prosat at gmx.net>,<psyduck202 at gmx.net>,<puky at gmx.net>,<pure_logic at gmx.net>,<purplemania at gmx.net>,<purzelbc at gmx.net>,<puschl at gmx.net>,<pwch at gmx.net>,<py-ro at gmx.net>,<pyndar at gmx.net>,<qing at gmx.net>,<quakky at gmx.net>,<r.a.messenger at gmx.net>,<r.boehm at gmx.net>,<r.kellner at gmx.net>,<r.oth at gmx.net>,<r.rieves at gmx.net>,<r.weerts at gmx.net>,<r_stoebener at gmx.net>,
quarantine
spam-07690360378b68b38d6166ed620194d2-20060329-085100-00912-01,
Message-ID: <E6OOOR7-0000Bt-IQcatalinanolantin at yahoo.com>, Hits: 28.309
Mar 29 08:51:00 ik-www-01 amavis[912]: (00912-01) TIMING [total 18272
ms] - sql-prepare: 3 (0%), SMTP EHLO: 4 (0%), SMTP pre-MAIL: 1 (0%),
mkdir tempdir: 1 (0%), create email.txt: 1 (0%), SMTP pre-DATA-flush: 23
(0%), SMTP DATA: 20 (0%), body hash: 2 (0%), mkdir parts: 4 (0%),
sql-connect: 9 (0%), lookup_sql: 4 (0%), lookup_sql: 3 (0%), lookup_sql:
2 (0%), lookup_sql: 2 (0%), lookup_sql: 2 (0%), lookup_sql: 2 (0%),
lookup_sql: 2 (0%), lookup_sql: 2 (0%), lookup_sql: 2 (0%), lookup_sql:
2 (0%), lookup_sql: 2 (0%), lookup_sql: 2 (0%), lookup_sql: 1 (0%),
lookup_sql: 2 (0%), lookup_sql: 2 (0%), lookup_sql: 2 (0%), lookup_sql:
2 (0%), lookup_sql: 2 (0%), lookup_sql: 2 (0%), lookup_sql: 2 (0%),
lookup_sql: 2 (0%), lookup_sql: 2 (0%), lookup_sql: 2 (0%), lookup_sql:
2 (0%), lookup_sql: 2 (0%), lookup_sql: 2 (0%), lookup_sql: 2 (0%),
lookup_sql: 2 (0%), lookup_sql: 2 (0%), lookup_sql: 1 (0%), lookup_sql:
2 (0%), lookup_sql: 2 (0%), lookup_sql: 2 (0%), lookup_sql: 2 (0%),
mime_decode: 26 (0%), get-file-type: ...
Mar 29 08:51:00 ik-www-01 amavis[912]: (00912-01) ...26 (0%),
decompose_part: 7 (0%), parts: 0 (0%), AV-scan-1: 21 (0%), AV-scan-2:
1964 (11%), SA msg read: 24 (0%), SA parse: 5 (0%), SA check: 15390
(84%), write-header: 45 (0%), save-to-local-mailbox: 2 (0%), lookup_sql:
19 (0%), fwd-connect: 122 (1%), fwd-mail-from: 2 (0%), fwd-rcpt-to: 16
(0%), write-header: 4 (0%), fwd-data: 71 (0%), fwd-data-end: 32 (0%),
fwd-rundown: 8 (0%), fwd-connect: 51 (0%), fwd-mail-from: 4 (0%),
fwd-rcpt-to: 171 (1%), write-header: 7 (0%), fwd-data: 1 (0%),
fwd-data-end: 110 (1%), fwd-rundown: 6 (0%), unlink-1-files: 12 (0%),
rundown: 1 (0%)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<pmeijer at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<pml_wien at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<pohl-michael at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18,
status=sent (250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as
62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<poinegger at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18,
status=sent (250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as
62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<polleyc at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<polystar at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<portable_enhancements at gmx.net>, relay=127.0.0.1[127.0.0.1],
delay=18, status=sent (250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok:
queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<potrc at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<pphoc at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<predwar at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<pregunter at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18,
status=sent (250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as
62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<prints at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<private.agent at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18,
status=sent (250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as
62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<procarion at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18,
status=sent (250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as
62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<promres at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<prosat at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<psyduck202 at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18,
status=sent (250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as
62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<puky at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<pure_logic at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18,
status=sent (250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as
62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<purplemania at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18,
status=sent (250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as
62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<purzelbc at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<puschl at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<pwch at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<py-ro at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<pyndar at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<qing at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<quakky at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<r.a.messenger at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18,
status=sent (250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as
62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<r.boehm at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<r.kellner at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18,
status=sent (250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as
62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<r.oth at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<r.rieves at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<r.weerts at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent
(250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as 62FF62753)
Mar 29 08:51:00 ik-www-01 postfix/qmgr[23861]: 2CF87D7C: removed
Mar 29 08:51:00 ik-www-01 postfix/smtp[959]: 2CF87D7C:
to=<r_stoebener at gmx.net>, relay=127.0.0.1[127.0.0.1], delay=18,
status=sent (250 2.6.0 Ok, id=00912-01, from MTA: 250 Ok: queued as
62FF62753)
Mar 29 08:51:01 ik-www-01 fetchmail[2387]: 1 message for XXX at
pop.1und1.de (7306 octets).
Mar 29 08:51:02 ik-www-01 fetchmail[2387]: reading message
pt6715994-msrv at pop.1und1.de:1 of 1 (7306 octets)
Mar 29 08:51:02 ik-www-01 postfix/smtpd[975]: connect from
localhost[127.0.0.1]
Mar 29 08:51:02 ik-www-01 postfix/smtpd[975]: 3B91FD7C:
client=localhost[127.0.0.1]
Mar 29 08:51:02 ik-www-01 postfix/cleanup[958]: 3B91FD7C:
message-id=<FWUORFSNCKGGYDXEKQJS at yahoo.com>
Mar 29 08:51:02 ik-www-01 postfix/qmgr[23861]: 3B91FD7C:
from=<SRS0=Bj0J=5U=paypal.com=service at gmx.de>, size=7673, nrcpt=1 (queue
active)
Mar 29 08:51:02 ik-www-01 fetchmail[2387]: flushed
Mar 29 08:51:02 ik-www-01 amavis[911]: (00911-02) ESMTP::10024
/var/lib/amavis/amavis-20060329T084630-00911:
<SRS0=Bj0J=5U=paypal.com=service at gmx.de> ->
<postmaster at ik-ac-lan1.local> Received: SIZE=7673 from localhost
([127.0.0.1]) by localhost (ik-www-01 [127.0.0.1]) (amavisd-new, port
10024) with ESMTP id 00911-02 for <postmaster at ik-ac-lan1.local>; Wed, 29
Mar 2006 08:51:02 +0200 (CEST)
Mar 29 08:51:02 ik-www-01 amavis[911]: (00911-02) body hash:
e137463d9af7b0f239a308896c54b651
Mar 29 08:51:02 ik-www-01 amavis[911]: (00911-02) Checking:
<SRS0=Bj0J=5U=paypal.com=service at gmx.de> -> <postmaster at ik-ac-lan1.local>
Mar 29 08:51:02 ik-www-01 amavis[911]: (00911-02) Checking for banned
MIME types and names
Mar 29 08:51:02 ik-www-01 amavis[911]: (00911-02) Checking for banned
(contents-based) file types, 1 parts
Mar 29 08:51:02 ik-www-01 amavis[911]: (00911-02) Using Clam
Antivirus-clamd: (built-in interface)
Mar 29 08:51:02 ik-www-01 amavis[911]: (00911-02) Clam Antivirus-clamd:
Connecting to socket /var/run/clamav/clamd.ctl
Mar 29 08:51:02 ik-www-01 amavis[911]: (00911-02) Clam Antivirus-clamd:
Sending CONTSCAN /var/lib/amavis/amavis-20060329T084630-00911/parts\n to
UNIX socket /var/run/clamav/clamd.ctl
Mar 29 08:51:02 ik-www-01 amavis[911]: (00911-02) Clam Antivirus-clamd
result: /var/lib/amavis/amavis-20060329T084630-00911/parts/part-00001:
HTML.Phishing.Pay-37 FOUND\n
Mar 29 08:51:02 ik-www-01 amavis[911]: (00911-02) Virus
HTML.Phishing.Pay-37 matches pattern (?-xism:.*), sender addr ignored
Mar 29 08:51:03 ik-www-01 amavis[911]: (00911-02) ip_addr_to_name:
returning: slushy.per.dpr.csiro.au
Mar 29 08:51:03 ik-www-01 amavis[911]: (00911-02) local delivery: <> ->
<virus-quarantine>,
mbx=/var/lib/amavis/virusmails/virus-20060329-085103-00911-02
Mar 29 08:51:03 ik-www-01 amavis[911]: (00911-02) SEND via SMTP:
[127.0.0.1]:10025 <> -> <postmaster at ik-it.com>
Mar 29 08:51:03 ik-www-01 postfix/smtpd[969]: connect from
localhost[127.0.0.1]
Mar 29 08:51:03 ik-www-01 postfix/smtpd[969]: C53942755:
client=localhost[127.0.0.1]
Mar 29 08:51:03 ik-www-01 postfix/cleanup[958]: C53942755:
message-id=<VA00911-02 at ik-www-01>
Mar 29 08:51:03 ik-www-01 postfix/qmgr[23861]: C53942755: from=<>,
size=3329, nrcpt=1 (queue active)
Mar 29 08:51:03 ik-www-01 postfix/smtpd[969]: disconnect from
localhost[127.0.0.1]
Mar 29 08:51:03 ik-www-01 amavis[911]: (00911-02) mail_via_smtp: 250
2.6.0 Ok, id=00911-02, from MTA: 250 Ok: queued as C53942755
Mar 29 08:51:03 ik-www-01 amavis[911]: (00911-02) Virus
HTML.Phishing.Pay-37 matches pattern (?-xism:.*), sender addr ignored
Mar 29 08:51:03 ik-www-01 amavis[911]: (00911-02) ip_addr_to_name:
returning: slushy.per.dpr.csiro.au
Mar 29 08:51:03 ik-www-01 amavis[911]: (00911-02) headers CLUSTERING:
done all 0 recips in one go
Mar 29 08:51:03 ik-www-01 amavis[911]: (00911-02) INFECTED
(HTML.Phishing.Pay-37), <?@slushy.per.dpr.csiro.au> ->
<postmaster at ik-ac-lan1.local>, quarantine
virus-20060329-085103-00911-02, Message-ID:
<FWUORFSNCKGGYDXEKQJS at yahoo.com>, Hits: -
Mar 29 08:51:03 ik-www-01 amavis[911]: (00911-02) TIMING [total 1586 ms]
- SMTP EHLO: 3 (0%), SMTP pre-MAIL: 1 (0%), SMTP pre-DATA-flush: 5 (0%),
SMTP DATA: 78 (5%), body hash: 1 (0%), lookup_sql: 3 (0%), mime_decode:
25 (2%), get-file-type: 23 (1%), decompose_part: 7 (0%), parts: 0 (0%),
AV-scan-1: 20 (1%), write-header: 1258 (79%), save-to-local-mailbox: 1
(0%), lookup_sql: 18 (1%), fwd-connect: 62 (4%), fwd-mail-from: 1 (0%),
fwd-rcpt-to: 4 (0%), write-header: 4 (0%), fwd-data: 25 (2%),
fwd-data-end: 24 (2%), fwd-rundown: 5 (0%), unlink-1-files: 16 (1%),
rundown: 1 (0%)
Mar 29 08:51:03 ik-www-01 postfix/virtual[972]: C53942755:
to=<info at ik-it.com>, orig_to=<postmaster at ik-it.com>, relay=virtual,
delay=0, status=sent (delivered to maildir)
Mar 29 08:51:03 ik-www-01 postfix/qmgr[23861]: C53942755: removed
Mar 29 08:51:03 ik-www-01 postfix/smtp[959]: 3B91FD7C:
to=<postmaster at ik-ac-lan1.local>, relay=127.0.0.1[127.0.0.1], delay=1,
status=bounced (host 127.0.0.1[127.0.0.1] said: 550 5.7.1 Message
content rejected, id=00911-02 - VIRUS: HTML.Phishing.Pay-37 (in reply to
end of DATA command))
Mar 29 08:51:03 ik-www-01 postfix/cleanup[958]: E2B2B2755:
message-id=<20060329065103.E2B2B2755 at localhost>
Mar 29 08:51:03 ik-www-01 postfix/qmgr[23861]: E2B2B2755: from=<>,
size=9544, nrcpt=1 (queue active)
Mar 29 08:51:03 ik-www-01 postfix/qmgr[23861]: 3B91FD7C: removed
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<pmeijer at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<pml_wien at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<pohl-michael at gmx.net>, relay=smtp.1und1.de[212.227.15.167],
delay=14, status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<poinegger at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<polleyc at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<polystar at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<portable_enhancements at gmx.net>, relay=smtp.1und1.de[212.227.15.167],
delay=14, status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<potrc at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<pphoc at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<predwar at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<pregunter at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<prints at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<procarion at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<promres at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<prosat at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<psyduck202 at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<puky at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<pure_logic at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<purplemania at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<purzelbc at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<puschl at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<pwch at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<py-ro at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<pyndar at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<qing at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<quakky at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<r.a.messenger at gmx.net>, relay=smtp.1und1.de[212.227.15.167],
delay=14, status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<r.boehm at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<r.kellner at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<r.oth at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<r.rieves at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<r.weerts at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/smtp[974]: 62FF62753:
to=<r_stoebener at gmx.net>, relay=smtp.1und1.de[212.227.15.167], delay=14,
status=sent (250 Message 0MKxQS-1FOUWA2Pmm-0005bQ accepted by
mrelayeu3.kundenserver.de)
Mar 29 08:51:14 ik-www-01 postfix/qmgr[23861]: 62FF62753: removed
Mar 29 08:51:17 ik-www-01 postfix/smtp[981]: E2B2B2755:
to=<SRS0=Bj0J=5U=paypal.com=service at gmx.de>,
relay=smtp.1und1.de[212.227.15.183], delay=14, status=sent (250 Message
0ML2Dk-1FOUWD3O0m-000194 accepted by mrelayeu7.kundenserver.de)
Mar 29 08:51:17 ik-www-01 postfix/qmgr[23861]: E2B2B2755: removed
Mar 29 08:51:33 ik-www-01 postfix/smtpd[950]: disconnect from
localhost[127.0.0.1]
Mar 29 08:51:33 ik-www-01 fetchmail[2387]: sleeping at Wed Mar 29
08:51:33 2006
und hier das ergebnis von postconf -n:
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
mailbox_command = /usr/bin/procmail -a "$EXTENSION"
mailbox_size_limit = 0
masquerade_classes = envelope_sender, envelope_recipient, header_sender,
header_recipient
masquerade_domains = $mydomain
masquerade_exceptions = root
mydestination = ik-www-01, localhost
mydomain = ik-ac-lan1.local
myhostname = localhost
mynetworks = 127.0.0.0/8 192.168.10.0/24
receive_override_options = no_address_mappings
recipient_delimiter = +
relayhost = [smtp.1und1.de]
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl/saslpasswd
smtp_sasl_security_options = noanonymous
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, check_recipient_access
mysql:/etc/postfix/mysql-virtual_domains.cf, reject_rbl_client
relays.ordb.org, reject_rbl_client dev.null.dk,
reject_rbl_client opm.blitzed.org, reject_rbl_client
sbl.spamhaus.org, check_relay_domains, permit
smtpd_sasl_auth_enable = yes
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key
smtpd_use_tls = yes
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_forwardings.cf
mysql:/etc/postfix/mysql-virtual_email2email.cf
virtual_gid_maps = static:5000
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_uid_maps = static:5000
ich hoffe, das ist nicht zu viel text für eine mailing liste.
gruß
stefan
Mehr Informationen über die Mailingliste Postfixbuch-users