From owner-freebsd-questions@FreeBSD.ORG Thu Sep 25 16:56:38 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1A5781065689 for ; Thu, 25 Sep 2008 16:56:38 +0000 (UTC) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from mail5.sea5.speakeasy.net (mail5.sea5.speakeasy.net [69.17.117.7]) by mx1.freebsd.org (Postfix) with ESMTP id E7E908FC1F for ; Thu, 25 Sep 2008 16:56:37 +0000 (UTC) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: (qmail 16844 invoked from network); 25 Sep 2008 16:56:37 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail5.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 25 Sep 2008 16:56:37 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id 5C6FC28444; Thu, 25 Sep 2008 12:56:36 -0400 (EDT) To: David Southwell References: <200809250934.57150.david@vizion2000.net> From: Lowell Gilbert Date: Thu, 25 Sep 2008 12:56:36 -0400 In-Reply-To: <200809250934.57150.david@vizion2000.net> (David Southwell's message of "Thu\, 25 Sep 2008 09\:34\:56 -0700") Message-ID: <4463ok9naz.fsf@be-well.ilk.org> User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: freebsd-questions@freebsd.org Subject: Re: Flooded with emails to root -- URGG X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd-questions@freebsd.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Sep 2008 16:56:38 -0000 David Southwell writes: > I am running postfix. > > Am receiving a flood of emails that appear to emanate from Servers who have > received spam that has masqueraded root@mydomain as the email source. > > Could anyone please suggest the best way of dealing with these. Please bear in > mind I am not all that familiar with postfix so if anyone feels treating me > like an idiot and spoonfeeding the actual command s to use I would be most > appreciative http://www.postfix.org/BACKSCATTER_README.html > I have just installed procmail but not yet activated it. (Incidentally I do > have a number of virtual domains but the only one that seems to get flooded > is the primary hostname. > > There have also been numerous failed hacking attempts on to the system but as > they keep trying to get in using services that are not actually running they > have got nowhere (so far!!) As far as you know. ;-) -- Lowell Gilbert, embedded/networking software engineer, Boston area http://be-well.ilk.org/~lowell/