From owner-freebsd-questions@FreeBSD.ORG  Thu Sep 25 16:09:00 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 905C61065689
	for <freebsd-questions@freebsd.org>;
	Thu, 25 Sep 2008 16:09:00 +0000 (UTC)
	(envelope-from david@vizion2000.net)
Received: from dns1.vizion2000.net
	(77-99-36-42.cable.ubr04.chap.blueyonder.co.uk [77.99.36.42])
	by mx1.freebsd.org (Postfix) with ESMTP id 58CE08FC2B
	for <freebsd-questions@freebsd.org>;
	Thu, 25 Sep 2008 16:09:00 +0000 (UTC)
	(envelope-from david@vizion2000.net)
Received: by dns1.vizion2000.net (Postfix, from userid 1007)
	id 53C201CC22; Thu, 25 Sep 2008 09:34:57 -0700 (PDT)
From: David Southwell <david@vizion2000.net>
Organization: Voice and Vision
To: freebsd-questions@freebsd.org
Date: Thu, 25 Sep 2008 09:34:56 -0700
User-Agent: KMail/1.9.10
MIME-Version: 1.0
Content-Type: text/plain;
  charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200809250934.57150.david@vizion2000.net>
Subject: Flooded with emails to root -- URGG
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Sep 2008 16:09:00 -0000

Hi

I am running postfix.

Am receiving a flood of  emails that appear to emanate from Servers who have 
received spam that has masqueraded root@mydomain as the email source. 

Could anyone please suggest the best way of dealing with these. Please bear in 
mind I am not all that familiar with postfix so if anyone feels treating me 
like an idiot and spoonfeeding the actual command s to use I would be most 
appreciative <chuckles> 

I have just installed procmail but not yet activated it. (Incidentally I do 
have a number of virtual domains but the only one that seems to get flooded 
is the primary hostname.

There have also been numerous failed hacking attempts on to the system but as 
they keep trying to get in using services that are not actually running they 
have got nowhere (so far!!)

david