LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 10-24-2006, 04:24 PM   #1
rangert
LQ Newbie
 
Registered: Oct 2006
Posts: 2

Rep: Reputation: 0
Postfix on RH 9 'No Recipient' in queue


I am running a RH9 server with Apache/PHP/MySql using postfix and have a few email enabled applications using very simple php forms.

However, for some time we have been getting the following in the maillog:

Oct 24 17:16:21 www postfix/pickup[18079]: 086C15045A: uid=48 from=<apache>
Oct 24 17:16:21 www postfix/cleanup[18572]: 086C15045A: message-id=<20061024211621.086C15045A@spweb.someplace.edu>
Oct 24 17:16:21 www postfix/pickup[18079]: warning: maildrop/00BC311C312: No recipients specified
Oct 24 17:16:21 www postfix/pickup[18079]: 0B3975045A: uid=48 from=<apache>
Oct 24 17:16:21 www postfix/cleanup[18572]: 0B3975045A: message-id=<20061024211620.0B3975045A@spweb.someplace.vt.edu>
Oct 24 17:16:21 www postfix/pickup[18079]: warning: maildrop/EA9BC11C30B: No recipients specified
Oct 24 17:16:21 www postfix/pickup[18079]: 29B045045A: uid=48 from=<apache>
Oct 24 17:16:21 www postfix/cleanup[18574]: 29B045045A: message-id=<20061024211621.29B045045A@spweb.someplace.vt.edu>
Oct 24 17:16:21 www postfix/pickup[18079]: warning: maildrop/00BC311C312: No recipients specified

The user apache should not be sending email to anyone.

The rate is variable but seems to be increasing lately. I'd like to find out what we have mis-configured. Got any ideas?

Ron
 
Old 10-24-2006, 04:33 PM   #2
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 198Reputation: 198
Is spweb.someplace.vt.edu a domain you actually send to? Appears to me some kiddie scriptors trying to use your simple php forms to send spam, looking for exploits or an accessible MTA to send their unwanted trash.
 
Old 10-25-2006, 07:35 AM   #3
rangert
LQ Newbie
 
Registered: Oct 2006
Posts: 2

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by trickykid
Is spweb.someplace.vt.edu a domain you actually send to? Appears to me some kiddie scriptors trying to use your simple php forms to send spam, looking for exploits or an accessible MTA to send their unwanted trash.
spweb.someplace.vt.edu is the hostname of the webserver which is running postfix.
 
Old 10-25-2006, 11:57 AM   #4
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 198Reputation: 198
Quote:
Originally Posted by rangert
spweb.someplace.vt.edu is the hostname of the webserver which is running postfix.
Okay, so that makes sense. I would assume what I mentioned before, spammers attempting to exploit your online php mail form scripts. Either trust your code has zero security holes in it or setup a firewall and start blocking the culprits.
 
  


Reply

Tags
apache, postfix, recipient


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Broken Fetchmail/Postfix - recipient not found swilliams2006 Linux - Server 1 09-18-2006 02:37 PM
Postfix: Is it possible to rewrite sender address only for selective recipient? Akhran Linux - Software 3 08-15-2006 10:48 AM
postfix problem:: Internet recipient cannot receive mail adrianmak Linux - Software 2 08-16-2005 05:30 AM
postfix and php : recipient unknown jodaog Linux - Software 1 03-13-2005 09:25 AM
postfix - wrong recipient address iliah Linux - Networking 2 09-26-2004 09:34 AM


All times are GMT -5. The time now is 10:58 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration