0

I have a postfix mail server that has been working great for some time. I started to notice some weird logs for postfix in the /var/log/mail.log. Seems like the log is a message saying that my server was detected as spam so it was blocked.

postfix/smtp[12217]: 748253FC69: to=angkhenghua@gmail.com, relay=alt1.gmail-smtp-in.l.google.com[209.85.202.26]:25, delay=330322, delays=330302/12/6/2.3, dsn=4.7.0, status=deferred (host alt1.gmail-smtp-in.l.google.com[209.85.202.26]

My mailservers are not configured to send outbound mail. There should be no outgoing mail only incoming. So not sure how these logs are showing up. Seems like my server is sending random emails out?

Anyway to see what is actually sending these emails like an email address?

Seems there are many of these emails.

Any help would be appreciated.

Thank you.

0

It's possible your server is configured as an open relay. So an outsider can connect to your server and say "send this message to gmail". Your machine accepts it and relays it on.

If you check in your logs before that line you might see lines similar to this:

Jul 24 17:51:15 SERVER postfix/smtpd[17418]: connect from unknown[2.57.122.202]
Jul 24 17:51:21 SERVER postfix/smtpd[17418]: NOQUEUE: reject: RCPT from unknown[2.57.122.202]: 454 4.7.1 <meregion69@gmail.com>: Relay access denied; from=<info@MYDOMAIN> to=<meregion69@gmail.com> proto=ESMTP helo=<WIN-6H79TFFJL6O>
Jul 24 17:51:21 SERVER postfix/smtpd[17418]: lost connection after RCPT from unknown[2.57.122.202]
Jul 24 17:51:21 SERVER postfix/smtpd[17418]: disconnect from unknown[2.57.122.202]

In this case my server correctly detected an outsider was trying to relay through me (pretending to be from my email domain) and rejected it. If I hadn't set up my relay rules set up properly then this message would have been sent.

4
  • I do not see any relay access in the logs. How would you configure it to close this relay? – bob Ditusa Jul 26 '20 at 13:52
  • I can see like the emails that are being sent out. I am assu,ing some sort of relay is being set up – bob Ditusa Jul 26 '20 at 13:59
  • How would you block this relay. Sorry I am new to postfix. – bob Ditusa Jul 26 '20 at 14:46
  • Start here: postfix.org/BASIC_CONFIGURATION_README.html – Stephen Harris Jul 26 '20 at 15:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.