From owner-freebsd-questions@FreeBSD.ORG Mon Jan 15 04:46:33 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 8EB2716A415 for ; Mon, 15 Jan 2007 04:46:33 +0000 (UTC) (envelope-from lists@qwirky.net) Received: from public.aci.on.ca (aci.on.ca [205.207.148.251]) by mx1.freebsd.org (Postfix) with ESMTP id 609E313C448 for ; Mon, 15 Jan 2007 04:46:33 +0000 (UTC) (envelope-from lists@qwirky.net) Received: from (invalid client hostname: host address literal does not match remote client address)[127.0.0.1] (xtreme-156-171.dyn.aci.on.ca[69.17.156.171] port=1046) by public.aci.on.ca([205.207.148.252] port=25) via TCP with esmtp (3837 bytes) (sender: ) id for ; Sun, 14 Jan 2007 23:46:31 -0500 (EST) (Smail-3.2.0.122-Pre 2005-Nov-17 #1 built 2006-Feb-21) Message-ID: <45AB072B.4090706@qwirky.net> Date: Sun, 14 Jan 2007 23:46:35 -0500 From: Jeff Royle User-Agent: Thunderbird 1.5.0.9 (Windows/20061207) MIME-Version: 1.0 To: "Jason C. Wells" References: <45AAFC85.9090205@highperformance.net> In-Reply-To: <45AAFC85.9090205@highperformance.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Antivirus: avast! (VPS 0703-0, 13/01/2007), Outbound message X-Antivirus-Status: Clean Cc: freebsd general questions Subject: Re: Mystery Spam Piling Up in Mqueue X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: lists@qwirky.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jan 2007 04:46:33 -0000 The example below is simply a bounce that did not go through. Note: Mailer-Daemon and MDeferred: Connection refused by macbilling.com. Your system attempted to delivery a bounce back to macbilling.com and the MTA @ macbilling.com is rejecting the bounce. Most likely spam using a forged (or real) address @macbilling.com was sent to your system to @highperformance.net and of course your system could not deliver the message so it bounced. If all messages in your queue are like this, I would take some time, report the spam to say spamcop.net or the like and remove them. You even could be a nice internet neighbour and try to redeliver the legit ones. Welcome to the running a mailserver on the intertubes. :-) Cheers, Jeff Jason C. Wells wrote: > I have a bunch of mail piling up in /var/spool/mqueue. It appears to be > all spam and it appears to be generated on the localhost. I am not > sending it. I double checked my self @ abuse.net to see if I was an > open relay, I'm not. I can't really say where it's coming from. How do > I figure this one out? > > An example is shown below. > > What has been a fun hobby all these years is turning into a nightmare. > Spam is making me batty. > > Thanks, > Jason C. Wells > > > V8 > T1168684668 > K1168832991 > N87 > P7790448 > I0/81/22039 > MDeferred: Connection refused by macbilling.com. > Frs > $_localhost > $r > $slocalhost > ${daemon_flags} > ${if_addr}192.168.1.204 > SMAILER-DAEMON > MDeferred: Connection refused by macbilling.com. > rRFC822; zpiracing.net@macbilling.com > RPF: > H?P?Return-Path: <<81>g> > H??Received: from localhost (localhost) > by mx1.highperformance.net (8.13.8/8.13.8) id l0DAbm7q007014; > Sat, 13 Jan 2007 02:37:48 -0800 (PST) > (envelope-from MAILER-DAEMON) > H?D?Date: Sat, 13 Jan 2007 02:37:48 -0800 (PST) > H??Received: from localhost (localhost) > by mx1.highperformance.net (8.13.8/8.13.8) id l0DAbm7q007014; > Sat, 13 Jan 2007 02:37:48 -0800 (PST) > (envelope-from MAILER-DAEMON) > H?D?Date: Sat, 13 Jan 2007 02:37:48 -0800 (PST) > H?F?From: Mail Delivery Subsystem > H?x?Full-Name: Mail Delivery Subsystem > H?M?Message-Id: <200701131037.l0DAbm7q007014@mx1.highperformance.net> > H??To: > H??MIME-Version: 1.0 > H??Content-Type: multipart/report; report-type=delivery-status; > boundary="l0DAbm7q007014.1168684668/mx1.highperformance.net" > H??Subject: Returned mail: see transcript for details > H??Auto-Submitted: auto-generated (failure) > . > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org"