LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
LinkBack Search this Thread
Old 05-14-2013, 11:27 PM   #1
saran_redhat
Member
 
Registered: May 2009
Location: chennai
Posts: 247

Rep: Reputation: 16
Mail Server problem


HI Friends,

In my linux mail server,

V8
T1368547362
K1368591840
N335
P30753480
I0/96/99516442
MDeferred: Connection timed out with hmail.com.
Fws
$_[61.19.190.13]
$rESMTP
$srssda.org
${daemon_flags}
${if_addr}70.32.89.121
S<no-reply@rssda.org>
MDeferred: Connection timed out with hmail.com.
rRFC822; kewldilip@hmail.com
RPFD:<kewldilip@hmail.com>
MDeferred: Connection refused by punkass.com.
rRFC822; kewlchika@punkass.com
RPFD:<kewlchika@punkass.com>
H?P?Return-Path: <~Ag>
H??X-Virus-Scanned: amavisd-new at ragecom.com
H??Received: from rssda.org ([61.19.190.13])
(authenticated bits=0)
by vps1.ragecom.com (8.13.8/8.13.8) with ESMTP id r4EFltko023636;
Tue, 14 May 2013 09:02:42 -0700
H??Reply-To: no-reply@rssda.org
H??From: "WellsFargo" <no-reply@rssda.org>
H??Subject: 1 new message
H??Date: 14 May 2013 23:02:36 +0700
H??Message-ID: <20130514230236.C6FDFE7615DFDEF4@rssda.org>
H??MIME-Version: 1.0
H??Content-Type: text/html;
charset="iso-8859-1"
H??Content-Transfer-Encoding: quoted-printable

in the mqueue directory. lot mails stored in the mqueue directory. Give some help.

Thanks
 
Old 05-15-2013, 09:50 AM   #2
TB0ne
Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 13,787

Rep: Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359
Quote:
Originally Posted by saran_redhat View Post
HI Friends,
In my linux mail server,
Again, as you've been asked in several of your other threads, you need to provide DETAILS: "linux mail server" tells us nothing...what version/distro of Linux, using which mail server engine, and in what kind of configuration? Firewalls? ANY details?
Quote:
MDeferred: Connection timed out with hmail.com.
...and if you tried to look this error up, you'd have seen that either the domain can't be resolved, or it's not set up to accept email from you as a relay.
Quote:
MDeferred: Connection refused by punkass.com.
Again, that domain is REFUSING to allow you to send mail to it. So, contact the mail admin at that site and ask them to let you in. However....
Quote:
H??Reply-To: no-reply@rssda.org
H??From: "WellsFargo" <no-reply@rssda.org>
..these two lines don't make me want to help you at all. You're masking your REPLY-TO address, you're saying the Email is coming from WELLS FARGO BANK in the US. and the rssda.org site is in Nigeria (home of the 419 scam).
Quote:
in the mqueue directory. lot mails stored in the mqueue directory. Give some help.
Thanks
Delete the mails, or fix the errors.
 
Old 05-15-2013, 03:01 PM   #3
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,950
Blog Entries: 11

Rep: Reputation: 860Reputation: 860Reputation: 860Reputation: 860Reputation: 860Reputation: 860Reputation: 860
If you can explain why someone in Chennai poses as Wells Fargo bank using an organisation
in Nigeria as the mail-address (Che?) we'll assist you.



If this mail didn't originate from your server you're running an open relay, and need
URGENT help. What mail system are you running? Post its config.


Moved to security.

Last edited by Tinkster; 05-15-2013 at 03:03 PM.
 
Old 05-15-2013, 11:22 PM   #4
saran_redhat
Member
 
Registered: May 2009
Location: chennai
Posts: 247

Original Poster
Rep: Reputation: 16
Mail server problem

Quote:
Originally Posted by Tinkster View Post
If you can explain why someone in Chennai poses as Wells Fargo bank using an organisation
in Nigeria as the mail-address (Che?) we'll assist you.



If this mail didn't originate from your server you're running an open relay, and need
URGENT help. What mail system are you running? Post its config.


Moved to security.
Thanks for your reply.

I am using centos 5.2

Mail configured settings:
Sendmail is configured for outgoing and qmail is configured for incomming. I don't know how they configured.

Thanks
 
Old 05-16-2013, 09:08 AM   #5
TB0ne
Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 13,787

Rep: Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359
Quote:
Originally Posted by saran_redhat View Post
Thanks for your reply.
I am using centos 5.2

Mail configured settings:
Sendmail is configured for outgoing and qmail is configured for incomming. I don't know how they configured.
A couple of things:
  1. You say that sendmail is configured for outging and qmail is configured for incoming (?)...then say you don't know how they are configured??? Didn't you just TELL US how they're configured?
  2. You STILL are not addressing the concerns brought up about Wells Fargo Bank, Nigeria, etc. NO ONE HERE is going to help a spammer/phisher/scammer.
 
Old 05-26-2013, 09:24 AM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,534
Blog Entries: 51

Rep: Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601
Quote:
Originally Posted by TB0ne View Post
You STILL are not addressing the concerns brought up about Wells Fargo Bank, Nigeria, etc. NO ONE HERE is going to help a spammer/phisher/scammer.
Easy, easy... It could be his server is sending spam due to vulnerabilities and he just doesn't recognize that, right?

@saran_redhat: please respond and tell us you've audited the complete server (accounts, running processes, software versions, anomalous files) and any other server that sends email through this server of yours.
 
Old 05-26-2013, 11:17 AM   #7
TB0ne
Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 13,787

Rep: Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359Reputation: 2359
Quote:
Originally Posted by unSpawn View Post
Easy, easy... It could be his server is sending spam due to vulnerabilities and he just doesn't recognize that, right?
Indeed, that could be the situation, or the OP could be working at a hosting company. But the OP has not answered the question in a few threads, despite being asked several times.
 
Old 05-26-2013, 11:38 AM   #8
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,534
Blog Entries: 51

Rep: Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601
Quote:
Originally Posted by TB0ne View Post
Indeed, that could be the situation, or the OP could be working at a hosting company.
Or a combination of the two?..


Quote:
Originally Posted by TB0ne View Post
But the OP has not answered the question in a few threads, despite being asked several times.
I've mailed him an invitation to return to this thread and clarify things.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] How to convert OSX 10.5 Mini Server's Mail & mailboxes to CentOS linux server mail? tstfortruth Linux - Server 4 06-23-2012 01:33 AM
[Ubuntu Server 11.10]Problem with mail server MarkoSan Linux - Server 12 05-24-2012 04:57 AM
Problem with Thunderbird and mail server on Ubuntu server dikon123 Linux - Server 16 11-18-2011 12:38 PM
problem receiving pop3 mail from postfix mail server GEN_Electric Linux - Software 2 02-14-2005 02:43 PM


All times are GMT -5. The time now is 05:00 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration