<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.E-MailFormatvorlage17
{mso-style-type:personal-compose;
font-family:Verdana;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
@page Section1
{size:595.3pt 841.9pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=DE link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Mir ist gerade zufällig aufgefallen, dass unser
Firmenmailserver seit heute auf den Blacklisten von uceprotect.net &
apews.org steht.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Das Blacklisting auf uceprotect.net kann ich in den
Logfiles nachvollziehen…<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>(/var/log/mail)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:10:47 mailhost postfix/smtp[6993]: 401E04E81E4:
to=<roland@zirndorf.de>, relay=cacs2.uceprotect.com[208.66.2.22]:25,
delay=1.9, delays=0.01/0/1.2/0.6, dsn=5.0.0, status=undeliver
able-but-not-cached (host cacs2.uceprotect.com[208.66.2.22] said: 550 UCEPROTECT-Policy
Server decided: 550 (V4.0-RULE-0005) Sender Verify is abusive. Your System is
part of a DDOS against the City of Zirnd orf. Enjoy your intranet for a week
now. (in reply to RCPT TO command))<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:11:18 mailhost postfix/smtp[6997]: 40E484E81E4:
to=<roland@zirndorf.de>, relay=unimatrix.admins.ws[194.95.224.137]:25,
delay=31, delays=0.01/0/30/0.18, dsn=5.0.0, status=undelive
rable-but-not-cached (host unimatrix.admins.ws[194.95.224.137] said: 550
UCEPROTECT-Policy Server decided: 550 (V4.0-RULE-0005) Sender Verify is
abusive. Your System is part of a DDOS against the City of Zi rndorf. Enjoy
your intranet for a week now. (in reply to RCPT TO command))<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Was ich allerdings garnicht verstehen ist, woher diese
eMail kommt die das Problem anscheinen verursacht.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>(/var/log/mail)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:10:44 mailhost postfix/smtpd[5428]: connect from
adsl-entr-1-c19-p031.vtx.ch[212.147.19.31]<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:10:45 mailhost postfix/cleanup[7048]:
401E04E81E4: message-id=<20070626121045.401E04E81E4@mail.unseredomain.tld><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:10:45 mailhost postfix/qmgr[30897]: 401E04E81E4:
from=<postmaster@unseredomain.tld>, size=272, nrcpt=1 (queue active)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:10:47 mailhost postfix/smtp[6993]: 401E04E81E4:
to=<roland@zirndorf.de>, relay=cacs2.uceprotect.com[208.66.2.22]:25,
delay=1.9, delays=0.01/0/1.2/0.6, dsn=5.0.0, status=undeliver<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>able-but-not-cached (host
cacs2.uceprotect.com[208.66.2.22] said: 550 UCEPROTECT-Policy Server decided:
550 (V4.0-RULE-0005) Sender Verify is abusive. Your System is part of a DDOS
against th<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>e City of Zirndorf. Enjoy your intranet for a week now.
(in reply to RCPT TO command))<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:10:47 mailhost postfix/qmgr[30897]: 401E04E81E4:
removed<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Wie man sieht wurden mehrere Verbindungen an die eine
Adresse des Kunden aufgebaut. Diese sehen sich alle relativ ähnlich.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 07:34:19 mailhost postfix/smtpd[15739]: NOQUEUE:
reject: RCPT from unknown[80.146.160.42]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<euresti@pasd.com> to=<email@kunde.de> proto=ESMTP
helo=<[80.146.160.42]><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 07:34:51 mailhost postfix/smtpd[15739]: NOQUEUE:
reject: RCPT from unknown[80.146.160.42]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<lala@gregoryscanlon.com> to=<email@kunde.de> proto=ESMTP
helo=<[80.146.160.42]><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 07:35:28 mailhost postfix/smtpd[16536]: NOQUEUE:
reject: RCPT from unknown[80.146.160.42]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<jkcoalition@hrliability.com> to=<email@kunde.de> proto=ESMTP
helo=<[80.146.160.42]><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 07:36:03 mailhost postfix/smtpd[16536]: NOQUEUE:
reject: RCPT from unknown[80.146.160.42]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<lam@janisl.com> to=<email@kunde.de> proto=ESMTP
helo=<[80.146.160.42]><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:01:50 mailhost postfix/smtpd[5428]: NOQUEUE:
reject: RCPT from unknown[89.204.13.120]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<euodevr@rhodey-son.com> to=<email@kunde.de> proto=ESMTP
helo=<[89.204.13.120]><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:07:21 mailhost postfix/smtpd[6994]: NOQUEUE:
reject: RCPT from adsl-entr-1-c19-p031.vtx.ch[212.147.19.31]: 450 4.7.1
<email@kunde.de>: Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<numuhadoqa@wemo.net> to=<email@kunde.de> proto=ESMTP
helo=<adsl-entr-1-c19-p031.vtx.ch><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:07:50 mailhost postfix/smtpd[5428]: NOQUEUE:
reject: RCPT from adsl-entr-1-c19-p031.vtx.ch[212.147.19.31]: 450 4.7.1
<email@kunde.de>: Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<dickey@kiselis.com> to=<email@kunde.de> proto=ESMTP
helo=<adsl-entr-1-c19-p031.vtx.ch><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:08:20 mailhost postfix/smtpd[6994]: NOQUEUE:
reject: RCPT from adsl-entr-1-c19-p031.vtx.ch[212.147.19.31]: 450 4.7.1
<email@kunde.de>: Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<rwirkus@direct.ca> to=<email@kunde.de> proto=ESMTP
helo=<adsl-entr-1-c19-p031.vtx.ch><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:08:47 mailhost postfix/smtpd[5428]: NOQUEUE:
reject: RCPT from adsl-entr-1-c19-p031.vtx.ch[212.147.19.31]: 450 4.7.1
<email@kunde.de>: Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<nicoladimattia@tiscalinet.it> to=<email@kunde.de> proto=ESMTP
helo=<adsl-entr-1-c19-p031.vtx.ch><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:09:20 mailhost postfix/smtpd[6994]: NOQUEUE:
reject: RCPT from adsl-entr-1-c19-p031.vtx.ch[212.147.19.31]: 450 4.7.1
<email@kunde.de>: Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<anneh@crocker.com> to=<email@kunde.de> proto=ESMTP
helo=<adsl-entr-1-c19-p031.vtx.ch><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:10:15 mailhost postfix/smtpd[5428]: NOQUEUE:
reject: RCPT from adsl-entr-1-c19-p031.vtx.ch[212.147.19.31]: 450 4.7.1
<email@kunde.de>: Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<dd_bettyboop@yahoo.com> to=<email@kunde.de> proto=ESMTP
helo=<adsl-entr-1-c19-p031.vtx.ch><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:10:51 mailhost postfix/smtpd[5428]: NOQUEUE:
reject: RCPT from adsl-entr-1-c19-p031.vtx.ch[212.147.19.31]: 450 4.7.1
<email@kunde.de>: Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<roland@zirndorf.de> to=<email@kunde.de> proto=ESMTP helo=<adsl-entr-1-c19-p031.vtx.ch><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:11:23 mailhost postfix/smtpd[6994]: NOQUEUE:
reject: RCPT from adsl-entr-1-c19-p031.vtx.ch[212.147.19.31]: 450 4.7.1
<email@kunde.de>: Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<nkianzad@web.de> to=<email@kunde.de> proto=ESMTP
helo=<adsl-entr-1-c19-p031.vtx.ch><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:11:48 mailhost postfix/smtpd[5428]: NOQUEUE:
reject: RCPT from adsl-entr-1-c19-p031.vtx.ch[212.147.19.31]: 450 4.7.1
<email@kunde.de>: Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<hendersonfamily@att.net> to=<email@kunde.de> proto=ESMTP
helo=<adsl-entr-1-c19-p031.vtx.ch><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:12:22 mailhost postfix/smtpd[7424]: NOQUEUE:
reject: RCPT from adsl-entr-1-c19-p031.vtx.ch[212.147.19.31]: 450 4.7.1
<email@kunde.de>: Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<rnakka@dehavilland.ca> to=<email@kunde.de> proto=ESMTP helo=<adsl-entr-1-c19-p031.vtx.ch><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:14:14 mailhost postfix/smtpd[7420]: NOQUEUE:
reject: RCPT from unknown[124.157.169.246]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<dcpdqauto@on.aibn.com> to=<email@kunde.de> proto=ESMTP
helo=<adsl-pool-124.157.169-246.tttmaxnet.com><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:14:36 mailhost postfix/smtpd[7418]: NOQUEUE:
reject: RCPT from unknown[124.157.169.246]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<doremi@eds.com> to=<email@kunde.de> proto=ESMTP
helo=<adsl-pool-124.157.169-246.tttmaxnet.com><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:14:55 mailhost postfix/smtpd[7420]: NOQUEUE:
reject: RCPT from unknown[124.157.169.246]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<rnakka@dehavilland.ca> to=<email@kunde.de> proto=ESMTP
helo=<adsl-pool-124.157.169-246.tttmaxnet.com><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:15:23 mailhost postfix/smtpd[7420]: NOQUEUE:
reject: RCPT from unknown[124.157.169.246]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html; from=<conner@nationalspirit.com>
to=<email@kunde.de> proto=ESMTP
helo=<adsl-pool-124.157.169-246.tttmaxnet.com><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:15:54 mailhost postfix/smtpd[7420]: NOQUEUE:
reject: RCPT from unknown[124.157.169.246]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<law@idmedia.co.uk> to=<email@kunde.de> proto=ESMTP
helo=<adsl-pool-124.157.169-246.tttmaxnet.com><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 14:50:36 mailhost postfix/smtpd[9599]: NOQUEUE:
reject: RCPT from unknown[123.108.202.83]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<Tarcisonicolae@imagesunlimited.co.uk> to=<email@kunde.de>
proto=ESMTP helo=<[123.108.202.83]><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 18:55:00 mailhost postfix/smtpd[23888]: NOQUEUE:
reject: RCPT from M2303P003.adsl.highway.telekom.at[80.123.31.195]: 450 4.7.1
<email@kunde.de>: Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html; from=<coddle@nctta.org>
to=<email@kunde.de> proto=SMTP
helo=<M2303P003.adsl.highway.telekom.at><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 19:45:24 mailhost postfix/smtpd[26907]: NOQUEUE:
reject: RCPT from unknown[89.169.134.210]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<evade@turtleg.com> to=<email@kunde.de> proto=ESMTP
helo=<[89.169.134.210]><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 19:46:23 mailhost postfix/smtpd[27122]: NOQUEUE:
reject: RCPT from unknown[89.169.134.210]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<lam@itera.com> to=<email@kunde.de> proto=ESMTP
helo=<[89.169.134.210]><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>Jun 26 19:47:45 mailhost postfix/smtpd[26177]: NOQUEUE:
reject: RCPT from unknown[89.169.134.210]: 450 4.7.1 <email@kunde.de>:
Recipient address rejected: Greylisted, see
http://isg.ee.ethz.ch/tools/postgrey/help/kunde.de.html;
from=<eva.verhoeven@unilever.com> to=<email@kunde.de> proto=ESMTP
helo=<[89.169.134.210]><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'>… wie gesagt. Ich kann mir nicht erklären wie die
eMail in das System kommt. Wäre Sie von einem Kunden verschickt worden würde
ich vorher die Authentifizierung sehen. Aber dies ist nicht der Fall.<o:p></o:p></span></font></p>
</div>
</body>
</html>