postfix segíítséég!!!

Linux-kezdő

sziasztok! tegnap vettem észre, hogy érdekes bejegyzések vannak a mail.log fileban.

a következőt találtam:

Jul 16 21:21:10 server postfix/smtpd[9212]: connect from census9.shodan.io[71.6.167.142]
Jul 16 21:21:10 server postfix/smtpd[9212]: lost connection after CONNECT from census9.shodan.io[71.6.167.142]
Jul 16 21:21:10 server postfix/smtpd[9212]: disconnect from census9.shodan.io[71.6.167.142]
Jul 16 21:24:30 server postfix/anvil[9214]: statistics: max connection rate 1/60s for (smtp:71.6.167.142) at Jul 16 21:21:10
Jul 16 21:24:30 server postfix/anvil[9214]: statistics: max connection count 1 for (smtp:71.6.167.142) at Jul 16 21:21:10
Jul 16 21:24:30 server postfix/anvil[9214]: statistics: max cache size 1 at Jul 16 21:21:10
Jul 16 22:24:52 server postfix/smtpd[10157]: connect from unknown[217.33.146.210]
Jul 16 22:24:52 server postfix/smtpd[10155]: connect from unknown[217.33.146.210]
Jul 16 22:24:52 server postfix/smtpd[10155]: lost connection after CONNECT from unknown[217.33.146.210]
Jul 16 22:24:52 server postfix/smtpd[10155]: disconnect from unknown[217.33.146.210]
Jul 16 22:24:52 server postfix/smtpd[10157]: NOQUEUE: reject: RCPT from unknown[217.33.146.210]: 454 4.7.1 : Relay access denied; from= to= proto=ESMTP helo=
Jul 16 22:24:52 server postfix/smtpd[10157]: lost connection after RCPT from unknown[217.33.146.210]
Jul 16 22:24:52 server postfix/smtpd[10157]: disconnect from unknown[217.33.146.210]
Jul 16 22:28:12 server postfix/anvil[10158]: statistics: max connection rate 2/60s for (smtp:217.33.146.210) at Jul 16 22:24:52
Jul 16 22:28:12 server postfix/anvil[10158]: statistics: max connection count 1 for (smtp:217.33.146.210) at Jul 16 22:24:52
Jul 16 22:28:12 server postfix/anvil[10158]: statistics: max cache size 1 at Jul 16 22:24:52
Jul 17 04:43:38 server postfix/smtpd[15696]: connect from 36-224-134-63.dynamic-ip.hinet.net[36.224.134.63]
Jul 17 04:43:39 server postfix/smtpd[15696]: NOQUEUE: reject: RCPT from 36-224-134-63.dynamic-ip.hinet.net[36.224.134.63]: 454 4.7.1 : Relay access denied; from= to= proto=SMTP helo=<84.21.7.164>
Jul 17 04:43:39 server postfix/smtpd[15696]: lost connection after RCPT from 36-224-134-63.dynamic-ip.hinet.net[36.224.134.63]
Jul 17 04:43:39 server postfix/smtpd[15696]: disconnect from 36-224-134-63.dynamic-ip.hinet.net[36.224.134.63]
Jul 17 04:47:00 server postfix/anvil[15698]: statistics: max connection rate 1/60s for (smtp:36.224.134.63) at Jul 17 04:43:38
Jul 17 04:47:00 server postfix/anvil[15698]: statistics: max connection count 1 for (smtp:36.224.134.63) at Jul 17 04:43:38
Jul 17 04:47:00 server postfix/anvil[15698]: statistics: max cache size 1 at Jul 17 04:43:38
Jul 17 06:44:25 server postfix/smtpd[17513]: connect from census7.shodan.io[71.6.135.131]
Jul 17 06:44:25 server postfix/smtpd[17513]: lost connection after CONNECT from census7.shodan.io[71.6.135.131]
Jul 17 06:44:25 server postfix/smtpd[17513]: disconnect from census7.shodan.io[71.6.135.131]
Jul 17 06:47:45 server postfix/anvil[17515]: statistics: max connection rate 1/60s for (smtp:71.6.135.131) at Jul 17 06:44:25
Jul 17 06:47:45 server postfix/anvil[17515]: statistics: max connection count 1 for (smtp:71.6.135.131) at Jul 17 06:44:25
Jul 17 06:47:45 server postfix/anvil[17515]: statistics: max cache size 1 at Jul 17 06:44:25

kérlek segítsetek hogyan tudom ezt kivédeni... egyáltalán ez mi akar lenni???????

a konfig mysql virt domain,virt user + dovecot + postfix (ubuntu)

nagyon köszönöm!!!!!!

  • 3241 megtekintés

( Sempi | 2014. 07. 20., v – 20:03 )

Hello

Én is hasonlókat láttam, iszonyat mennyiségben. Ha nem csinálsz semmit, akkor sincs nagy gond, maximum a log méretenő.

Ha valamit mégis tennél, akkor nálam bevállt a fail2ban install és a mail.log ellenőrzése a beépített szűrőkkel elrendezi a próbálkozókat...