Linux - Server This forum is for the discussion of Linux Software used in a server related context. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
|
02-21-2011, 05:56 AM
|
#1
|
Member
Registered: Jun 2008
Posts: 57
Rep:
|
qmail related issue
there is qmail server in my office. Yesterday some of the users received mails from mailer-daemon and postmaster.those mails when checked from the logs showed some unknown ip instead of the server ip. we came to know after checking that those were viruses. One of the account receiving mail was configured in that user's gmail account as fetcher and gmail when received those mails it simply blocked it. Now this issue has been reported previously also.Can someone tell that why there are mails being sent to users from postmaster and mailer-daemon and what can we do to stop mailer-daemon and postmaster to send these mails. there is also firewall working with the qmail
|
|
|
02-21-2011, 07:26 AM
|
#2
|
Member
Registered: Sep 2009
Location: Indiana, USA
Distribution: SLES, SLED, OpenSuse, CentOS, ubuntu 10.10, OpenBSD, FreeBSD
Posts: 195
Rep:
|
If I am reading your post right, the mail you are receiving from "Mailer Daemon" and "Postmaster", are not from your machine, but rather from other machines. It could be generated by the other server for your mail account, or it could be what is known as Backscatter. Backscatter is where mail is sent out with your address as the From. When it is not delivered, poorly configured mail servers will send the rejected e-mail back to the address in the "From" thus delivering the payload.
It is yet another method to get someone to open spam or Virus laden mail.
In order to protect your users the server should be doing spam checking, virus scanning, and taking other measures to ensure e-mail is properly addresses, does not contain a virus, and is not spam.
You need to look at tools like Maia Mailguard, which uses a fork of Amavisd, SpamAssassin, Clam AV, as well as various other checks to prevent spam and viruses from reaching your users mailboxes.
|
|
|
02-22-2011, 12:52 AM
|
#3
|
Member
Registered: Jun 2008
Posts: 57
Original Poster
Rep:
|
Quote:
Originally Posted by never say never
If I am reading your post right, the mail you are receiving from "Mailer Daemon" and "Postmaster", are not from your machine, but rather from other machines. It could be generated by the other server for your mail account, or it could be what is known as Backscatter. Backscatter is where mail is sent out with your address as the From. When it is not delivered, poorly configured mail servers will send the rejected e-mail back to the address in the "From" thus delivering the payload.
It is yet another method to get someone to open spam or Virus laden mail.
In order to protect your users the server should be doing spam checking, virus scanning, and taking other measures to ensure e-mail is properly addresses, does not contain a virus, and is not spam.
You need to look at tools like Maia Mailguard, which uses a fork of Amavisd, SpamAssassin, Clam AV, as well as various other checks to prevent spam and viruses from reaching your users mailboxes.
|
thanks
|
|
|
All times are GMT -5. The time now is 03:34 AM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|