LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 02-21-2011, 05:56 AM   #1
aliabbass
Member
 
Registered: Jun 2008
Posts: 57

Rep: Reputation: 0
Question qmail related issue


there is qmail server in my office. Yesterday some of the users received mails from mailer-daemon and postmaster.those mails when checked from the logs showed some unknown ip instead of the server ip. we came to know after checking that those were viruses. One of the account receiving mail was configured in that user's gmail account as fetcher and gmail when received those mails it simply blocked it. Now this issue has been reported previously also.Can someone tell that why there are mails being sent to users from postmaster and mailer-daemon and what can we do to stop mailer-daemon and postmaster to send these mails. there is also firewall working with the qmail
 
Old 02-21-2011, 07:26 AM   #2
never say never
Member
 
Registered: Sep 2009
Location: Indiana, USA
Distribution: SLES, SLED, OpenSuse, CentOS, ubuntu 10.10, OpenBSD, FreeBSD
Posts: 195

Rep: Reputation: 37
If I am reading your post right, the mail you are receiving from "Mailer Daemon" and "Postmaster", are not from your machine, but rather from other machines. It could be generated by the other server for your mail account, or it could be what is known as Backscatter. Backscatter is where mail is sent out with your address as the From. When it is not delivered, poorly configured mail servers will send the rejected e-mail back to the address in the "From" thus delivering the payload.

It is yet another method to get someone to open spam or Virus laden mail.

In order to protect your users the server should be doing spam checking, virus scanning, and taking other measures to ensure e-mail is properly addresses, does not contain a virus, and is not spam.

You need to look at tools like Maia Mailguard, which uses a fork of Amavisd, SpamAssassin, Clam AV, as well as various other checks to prevent spam and viruses from reaching your users mailboxes.
 
Old 02-22-2011, 12:52 AM   #3
aliabbass
Member
 
Registered: Jun 2008
Posts: 57

Original Poster
Rep: Reputation: 0
Thumbs up

Quote:
Originally Posted by never say never View Post
If I am reading your post right, the mail you are receiving from "Mailer Daemon" and "Postmaster", are not from your machine, but rather from other machines. It could be generated by the other server for your mail account, or it could be what is known as Backscatter. Backscatter is where mail is sent out with your address as the From. When it is not delivered, poorly configured mail servers will send the rejected e-mail back to the address in the "From" thus delivering the payload.

It is yet another method to get someone to open spam or Virus laden mail.

In order to protect your users the server should be doing spam checking, virus scanning, and taking other measures to ensure e-mail is properly addresses, does not contain a virus, and is not spam.

You need to look at tools like Maia Mailguard, which uses a fork of Amavisd, SpamAssassin, Clam AV, as well as various other checks to prevent spam and viruses from reaching your users mailboxes.
thanks
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Issue with vqadmin and qmail (Perl/apache related) jon_k Debian 3 02-22-2007 11:32 PM
Issue with vqadmin and qmail (Perl/apache related) jon_k Debian 2 02-22-2007 08:16 AM
qmail problem related to yahoo and gmail pikky2006 Linux - Server 3 12-14-2006 08:36 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 03:34 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration