Angeblicher SPAM Versand über meinen 1&1 Root

Rund um die Sicherheit des Systems und die Applikationen
Post Reply
Roger Wilco
Posts: 5923
Joined: 2004-05-23 12:53
 

Re: Angeblicher SPAM Versand über meinen 1&1 Root

Post by Roger Wilco »

oxygen wrote:Der Übeltäter ist natürlich offensichtlich der Formmailer.
Ich würde offensichtlich nein sagen, weil:
CloneCommander wrote:Zum Vergleich dann noch eine, die ich mir per Formmailer von meinem Server geschickt habe (dort taucht z.B. auch der Additional Header auf, den der sendmail-wrapper hinzufügt.)
CloneCommander wrote:

Code: Select all

DomainKey-Status: no signature
X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on MEINEDOMAIN.de
X-Spam-Level: 
X-Spam-Status: No, score=-75.8 required=7.0 tests=BAYES_50,FUZZY_ROLEX,
	HELO_DYNAMIC_SPLIT_IP,MIME_BASE64_BLANKS,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,
	URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,
	URIBL_WS_SURBL,USER_IN_WHITELIST autolearn=no version=3.1.8
DomainKey-Status: no signature
Received: (qmail 8741 invoked from network); 14 Sep 2008 15:17:44 +0200
Received: from 160.red-83-50-19.dynamicip.rima-tde.net (83.50.19.160)
  by sxxxxxxxx.onlinehome-server.info with SMTP; 14 Sep 2008 15:17:44 +0200
Received-SPF: none (sxxxxxxxx.onlinehome-server.info: domain at MEINEDOMAIN.de does not designate permitted sender hosts)
X-Originating-IP: 156.42.231.10 by smtp.83.50.19.160;  Sun, 14 Sep 2008 09:08:21 -0500
Message-ID: <fiivprsCANLYinfo@MEINEDOMAIN.de>
From: "info@MEINEDOMAIN.de" <info@MEINEDOMAIN.de>
Reply-To: "info@MEINEDOMAIN.de" <info@MEINEDOMAIN.de>
To: info@MEINEDOMAIN.de
Subject: 0ne of a kind repl1cas
Date: Sun, 14 Sep 2008 09:17:21 -0500
Content-Type: text/plain;
Content-Transfer-Encoding: base64
Hier wurde die E-Mail tatsächlich von außerhalb eingeliefert und du warst lediglich der Empfänger (siehe Received-Header, sowie eingeschränkt vertrauenswürdig der X-Originating-IP-Header).
Top
oxygen
Posts: 2138
Joined: 2002-12-15 00:10
Location: Bergheim
 

Re: Angeblicher SPAM Versand über meinen 1&1 Root

Post by oxygen »

Du hast recht, hätte mal richtig lesen sollen. Bleibt das Problem das Spamassassin schlecht konfiguriert ist. Sonst wäre diese email gefiltert worden.
Top
clonecommander
Posts: 34
Joined: 2005-04-05 13:51
 

Re: Angeblicher SPAM Versand über meinen 1&1 Root

Post by clonecommander »

Was heißt "schlecht konfiguriert", wie mache ich es richtig?
Top
franki
Posts: 60
Joined: 2005-05-31 16:23
Location: Dresden
 

Re: Angeblicher SPAM Versand über meinen 1&1 Root

Post by franki »

Code: Select all

X-Spam-Status: No, score=-75.8
Ein Score von -75.8? Kommt mir eigenartig vor. Hat da vielleicht jemand was an den Regeln manipuliert? Hast Du mal sa-update laufen lassen?

Gruß von Frank.
Top
oxygen
Posts: 2138
Joined: 2002-12-15 00:10
Location: Bergheim
 

Re: Angeblicher SPAM Versand über meinen 1&1 Root

Post by oxygen »

X-Spam-Status: No, score=-75.8 required=7.0 tests=BAYES_50,FUZZY_ROLEX,
HELO_DYNAMIC_SPLIT_IP,MIME_BASE64_BLANKS,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,
URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,
URIBL_WS_SURBL,USER_IN_WHITELIST autolearn=no version=3.1.8
Die Vielzahl der Treffer zeigen deutlich, dass SpamAssassin die eMail als Spam erkennen würde. Jedoch ist hier eine Whitelist aktiv, die das verhindert.
Top
clonecommander
Posts: 34
Joined: 2005-04-05 13:51
 

Re: Angeblicher SPAM Versand über meinen 1&1 Root

Post by clonecommander »

achso, das meinst Du :)
Wie mein Vorredner schon sagt -> Whitelist da Absender = ich (also nach dem FROM-Header)...

Die anderen eMails dieser Art werden alle erkannt.
Top
oxygen
Posts: 2138
Joined: 2002-12-15 00:10
Location: Bergheim
 

Re: Angeblicher SPAM Versand über meinen 1&1 Root

Post by oxygen »

CloneCommander wrote:achso, das meinst Du :)
Wie mein Vorredner schon sagt -> Whitelist da Absender = ich (also nach dem FROM-Header)...
Das ist aber trotzdem nicht sinnvoll. Da sich die From Zeile nach belieben modizifieren lässt. Insbesondere wo auch noch der SPF Record fehlt.
Top
clonecommander
Posts: 34
Joined: 2005-04-05 13:51
 

Re: Angeblicher SPAM Versand über meinen 1&1 Root

Post by clonecommander »

Hi,

von 1&1 habe ich leider immer noch nichts gehört, gestern hat aber ein User von meinem Server folgende eMail bekommen:
Hi. This is the qmail-send program at MEINSERVER.de.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER>:
Unable to forward message: mail server permanently rejected message (#5.3.0).

<bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER>:
Unable to forward message: mail server permanently rejected message (#5.3.0).

<bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER>:
Unable to forward message: mail server permanently rejected message (#5.3.0).

<bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER>:
Unable to forward message: mail server permanently rejected message (#5.3.0).

<bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER>:
Unable to forward message: mail server permanently rejected message (#5.3.0).

<bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER>:
Unable to forward message: mail server permanently rejected message (#5.3.0).

<bvkm2@ANDERE_DOMAIN_AUF_MEINEM_SERVER>:
Unable to forward message: mail server permanently rejected message (#5.3.0).

--- Below this line is a copy of the message.

Return-Path: <qomlbrqew@boulderhomebuying.com>
Received: (qmail 26097 invoked from network); 29 Sep 2008 15:39:46 +0200
Received: from mail.lcarpets.ru (212.44.144.116)
by MEINSERVER with SMTP; 29 Sep 2008 15:39:45 +0200
Received-SPF: softfail (MEINSERVER: transitioning SPF record at boulderhomebuying.com does not designate 212.44.144.116 as permitted sender)
Received: from [212.44.144.116] by smtp-backup.advancedaccess.com; Mon, 29 Sep 2008 16:37:59 +0300
Message-ID: <01c92251$bb7d0d80$74902cd4@qomlbrqew>
From: "Mandy Hoyt" <qomlbrqew@boulderhomebuying.com>
To: <bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER>
Subject: Nach 10 Minuten kommen? - verdreifachen Sie die Zeit
Date: Mon, 29 Sep 2008 16:37:59 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01C92251.BB7D0D80"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700

This is a multi-part message in MIME format.
Was mich wundert: Seine Domain taucht dort nirgends auf. Lediglich eine andere Domain, die auf meinem Server liegt. Zwar steht hier auch "Received: (qmail 26097 invoked from network);" - kommt mir aber trotzdem komisch vor?!

Zur selben zeit in der mail.info:
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748655 new msg 83904634
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748683 info msg 83904634: bytes 4938 from <qomlbrqew@boulderhomebuying.com> qp 26097 uid 2020
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.755802 starting delivery 8311: msg 83904634 to local 52-bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.755890 status: local 1/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.757781 starting delivery 8312: msg 83904634 to local 52-bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.757940 status: local 2/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.758077 starting delivery 8313: msg 83904634 to local 52-bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.758239 status: local 3/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.758371 starting delivery 8314: msg 83904634 to local 52-bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.758830 status: local 4/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.758970 starting delivery 8315: msg 83904634 to local 52-bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759102 status: local 5/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759249 starting delivery 8316: msg 83904634 to local 52-bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759381 status: local 6/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759539 starting delivery 8317: msg 83904634 to local 52-bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759672 status: local 7/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759802 starting delivery 8318: msg 83904634 to local 52-bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759932 status: local 8/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760060 starting delivery 8319: msg 83904634 to local 52-bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760192 status: local 9/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760517 starting delivery 8320: msg 83904634 to local 52-bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760556 status: local 10/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.842631 new msg 84313504
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.842750 info msg 84313504: bytes 5072 from <qomlbrqew@boulderhomebuying.com> qp 26120 uid 110
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.846139 new msg 83904639
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.846168 info msg 83904639: bytes 5074 from <qomlbrqew@boulderhomebuying.com> qp 26121 uid 110
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.885414 delivery 8316: success: did_0+1+0/qp_26113/
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.887482 status: local 9/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.887530 starting delivery 8321: msg 83904634 to local 52-bvkm2@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.887556 status: local 10/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.896025 new msg 84313506
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.896053 info msg 84313506: bytes 5072 from <qomlbrqew@boulderhomebuying.com> qp 26126 uid 110
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.896091 delivery 8319: success: did_0+1+0/qp_26116/
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.896117 status: local 9/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.896143 starting delivery 8322: msg 84313504 to local 52-gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.896168 status: local 10/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.900507 new msg 84313513
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.900533 info msg 84313513: bytes 5074 from <maxlee@koraus.co.kr> qp 24576 uid 2020
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.900560 delivery 8315: success: did_0+1+0/qp_26119/
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.900585 status: local 9/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.903674 starting delivery 8323: msg 84313506 to local 52-gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.903741 status: local 10/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.903792 new msg 84313514
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.903818 info msg 84313514: bytes 5073 from <> qp 24582 uid 2020
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.913571 new msg 84313517
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.913605 info msg 84313517: bytes 5073 from <> qp 24594 uid 2020
Sep 29 15:39:46 MEINSERVER spamd[1971]: spamd: got connection over /tmp/spamd_full.sock
Sep 29 15:39:46 MEINSERVER spamd[1971]: spamd: using default config for gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER: /var/qmail/mailnames/ANDERE_DOMAIN_AUF_MEINEM_SERVER/gf/.spamassassin/user_prefs
Sep 29 15:39:46 MEINSERVER spamd[1971]: spamd: processing message <01c92251$bb7d0d80$74902cd4@qomlbrqew> for gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER:110
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.975780 delivery 8313: failure: Unable_to_forward_message:_mail_server_permanently_rejected_message_(#5.3.0)./
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.976148 status: local 9/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.976289 delivery 8317: failure: Unable_to_forward_message:_mail_server_permanently_rejected_message_(#5.3.0)./
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.976429 status: local 8/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.976559 delivery 8320: success: did_0+1+0/qp_26133/
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.976690 status: local 7/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.976821 delivery 8312: failure: Unable_to_forward_message:_mail_server_permanently_rejected_message_(#5.3.0)./
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.976954 status: local 6/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.977085 delivery 8318: failure: Unable_to_forward_message:_mail_server_permanently_rejected_message_(#5.3.0)./
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.977219 status: local 5/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.977535 starting delivery 8324: msg 84313513 to local 52-evo@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.977574 status: local 6/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.977601 starting delivery 8325: msg 84313517 to local 101-linctbnmet@EMPFÄNGERDOMAIN_OBIGER_MAIL
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.977627 status: local 7/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.977679 starting delivery 8326: msg 84313514 to local 101-linctbnmet@EMPFÄNGERDOMAIN_OBIGER_MAIL
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.977704 status: local 8/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.977728 new msg 84313518
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.997558 info msg 84313518: bytes 5072 from <> qp 24598 uid 2020
und in messages:
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.296464 warning: unable to stat mess/12/84286939
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.296491 warning: unable to stat mess/12/83904840
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.296517 warning: unable to stat mess/13/84266769
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.296544 warning: unable to stat mess/13/84272174
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.296575 warning: unable to stat mess/13/84286940
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.296601 warning: unable to stat mess/13/84313528
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.296627 warning: unable to stat mess/15/84271923
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.296655 warning: unable to stat mess/15/84272176
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.296682 warning: unable to stat mess/15/84286919
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.296708 warning: unable to stat mess/15/84313530
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.296735 warning: unable to stat mess/16/83904476
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297444 warning: unable to stat mess/16/84303917
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297519 warning: unable to stat mess/16/84313531
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297554 warning: unable to stat mess/17/84272178
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297584 warning: unable to stat mess/18/84272202
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297612 warning: unable to stat mess/18/84286945
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297640 warning: unable to stat mess/18/84313533
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297668 warning: unable to stat mess/19/84266729
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297698 warning: unable to stat mess/19/84286946
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297728 warning: unable to stat mess/19/84313534
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297756 warning: unable to stat mess/20/84272181
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297784 warning: unable to stat mess/20/84313535
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297812 warning: unable to stat mess/21/84266754
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297839 warning: unable to stat mess/21/84272182
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297866 warning: unable to stat mess/21/84286948
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297895 warning: unable to stat mess/21/84313513
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297924 warning: unable to stat mess/21/84313536
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297952 warning: unable to stat mess/22/84303946
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.297981 warning: unable to stat mess/22/84313514
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.298010 warning: unable to stat mess/22/84313537
Sep 29 15:39:46 MEINSERVER qmail-remote-handlers[26091]: Handlers Filter before-remote for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-remote-handlers[26091]: from=
Sep 29 15:39:46 MEINSERVER qmail-remote-handlers[26091]: to=dwstanhopemicroworksm@stanhopemicroworks.com
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: from=qomlbrqew@boulderhomebuying.com
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: to=bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: to=bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: to=bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: to=bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: to=bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: to=bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: to=bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: to=bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: to=bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: to=bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: to=bvkm2@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: hook_dir = '/var/qmail//handlers/before-queue'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: recipient[3] = 'bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: handlers dir = '/var/qmail//handlers/before-queue/recipient/bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: recipient[4] = 'bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: handlers dir = '/var/qmail//handlers/before-queue/recipient/bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: recipient[5] = 'bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: handlers dir = '/var/qmail//handlers/before-queue/recipient/bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: recipient[5] = 'bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: handlers dir = '/var/qmail//handlers/before-queue/recipient/bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: recipient[6] = 'bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: handlers dir = '/var/qmail//handlers/before-queue/recipient/bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: recipient[7] = 'bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: handlers dir = '/var/qmail//handlers/before-queue/recipient/bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: recipient[8] = 'bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: handlers dir = '/var/qmail//handlers/before-queue/recipient/bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: recipient[9] = 'bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: handlers dir = '/var/qmail//handlers/before-queue/recipient/bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: recipient[10] = 'bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: handlers dir = '/var/qmail//handlers/before-queue/recipient/bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: recipient[11] = 'bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: handlers dir = '/var/qmail//handlers/before-queue/recipient/bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: recipient[12] = 'bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: handlers dir = '/var/qmail//handlers/before-queue/recipient/bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: recipient[13] = 'bvkm2@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: handlers dir = '/var/qmail//handlers/before-queue/recipient/bvkm2@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.744954 warning: unable to stat mess/0/84271931
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.745029 warning: unable to stat mess/0/84286950
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.745057 warning: unable to stat mess/0/84313538
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.745088 warning: unable to stat mess/1/84286951
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.745116 warning: unable to stat mess/1/84313539
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.745148 warning: unable to stat mess/2/84271933
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.745177 warning: unable to stat mess/2/84313517
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.745206 warning: unable to stat mess/2/84313540
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.745335 warning: unable to stat mess/3/84286930
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.745370 warning: unable to stat mess/3/84313518
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.745401 warning: unable to stat mess/3/84313541
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.745430 warning: unable to stat mess/4/84272165
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.746302 warning: unable to stat mess/4/84272211
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.746347 warning: unable to stat mess/5/84272166
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.746373 warning: unable to stat mess/5/84313520
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.746398 warning: unable to stat mess/6/84286933
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.746424 warning: unable to stat mess/6/84290590
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.746449 warning: unable to stat mess/7/83904421
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.746475 warning: unable to stat mess/7/84286934
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.746501 warning: unable to stat mess/7/84290591
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.746535 warning: unable to stat mess/7/84313522
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.746561 warning: unable to stat mess/8/84272215
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.746588 warning: unable to stat mess/8/84313523
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26054]: starter: submitter[26097] exited normally
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.747933 warning: unable to stat mess/9/84286936
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748174 warning: unable to stat mess/9/84291329
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748213 warning: unable to stat mess/9/84313524
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748241 warning: unable to stat mess/10/84272171
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748269 warning: unable to stat mess/10/84286937
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748297 warning: unable to stat mess/10/84291330
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748326 warning: unable to stat mess/10/84313525
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748355 warning: unable to stat mess/11/84266767
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748326 warning: unable to stat mess/10/84313525
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748355 warning: unable to stat mess/11/84266767
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748382 warning: unable to stat mess/11/84272172
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748409 warning: unable to stat mess/11/84313526
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748436 warning: unable to stat mess/12/84272173
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748463 warning: unable to stat mess/12/84272196
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748490 warning: unable to stat mess/12/84286939
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748517 warning: unable to stat mess/12/83904840
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748545 warning: unable to stat mess/13/84266769
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748572 warning: unable to stat mess/13/84272174
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748599 warning: unable to stat mess/13/84286940
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748627 warning: unable to stat mess/13/84313528
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748655 new msg 83904634
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.748683 info msg 83904634: bytes 4938 from <qomlbrqew@boulderhomebuying.com> qp 26097 uid 2020
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.755802 starting delivery 8311: msg 83904634 to local 52-bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.755890 status: local 1/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.757781 starting delivery 8312: msg 83904634 to local 52-bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.757940 status: local 2/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.758077 starting delivery 8313: msg 83904634 to local 52-bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.758239 status: local 3/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.758371 starting delivery 8314: msg 83904634 to local 52-bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.758830 status: local 4/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.758970 starting delivery 8315: msg 83904634 to local 52-bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759102 status: local 5/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759249 starting delivery 8316: msg 83904634 to local 52-bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759381 status: local 6/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759539 starting delivery 8317: msg 83904634 to local 52-bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759672 status: local 7/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759802 starting delivery 8318: msg 83904634 to local 52-bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.759932 status: local 8/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760060 starting delivery 8319: msg 83904634 to local 52-bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760192 status: local 9/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760321 warning: unable to stat mess/15/84271923
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760517 starting delivery 8320: msg 83904634 to local 52-bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760556 status: local 10/10 remote 14/20
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760583 warning: unable to stat mess/15/84272176
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760609 warning: unable to stat mess/15/84286919
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760634 warning: unable to stat mess/15/84313530
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760659 warning: unable to stat mess/16/83904476
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760685 warning: unable to stat mess/16/84303917
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760710 warning: unable to stat mess/16/84313531
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760736 warning: unable to stat mess/17/84272178
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760761 warning: unable to stat mess/18/84272202
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760787 warning: unable to stat mess/18/84286945
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.760812 warning: unable to stat mess/18/84313533
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.763971 warning: unable to stat mess/19/84266729
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.764044 warning: unable to stat mess/19/84286946
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.764071 warning: unable to stat mess/19/84313534
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.764098 warning: unable to stat mess/20/84272181
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.764123 warning: unable to stat mess/20/84313535
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.764149 warning: unable to stat mess/21/84266754
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.764123 warning: unable to stat mess/20/84313535
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.764149 warning: unable to stat mess/21/84266754
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.764175 warning: unable to stat mess/21/84272182
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.764201 warning: unable to stat mess/21/84286948
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.764227 warning: unable to stat mess/21/84313513
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.764253 warning: unable to stat mess/21/84313536
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.764278 warning: unable to stat mess/22/84303946
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.765149 warning: unable to stat mess/22/84313514
Sep 29 15:39:46 MEINSERVER qmail: 1222695586.765191 warning: unable to stat mess/22/84313537
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26102]: Handlers Filter before-local for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26103]: Handlers Filter before-local for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26099]: Handlers Filter before-local for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26099]: from=qomlbrqew@boulderhomebuying.com
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26099]: to=bvk1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26102]: from=qomlbrqew@boulderhomebuying.com
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26102]: to=bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26106]: Handlers Filter before-local for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26106]: from=qomlbrqew@boulderhomebuying.com
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26106]: to=bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26103]: from=qomlbrqew@boulderhomebuying.com
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26103]: to=bvk@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26105]: Handlers Filter before-local for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26107]: Handlers Filter before-local for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26104]: Handlers Filter before-local for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26100]: Handlers Filter before-local for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26098]: Handlers Filter before-local for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26101]: Handlers Filter before-local for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26116]: Handlers Filter before-queue for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26119]: Handlers Filter before-queue for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26119]: from=qomlbrqew@boulderhomebuying.com
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26119]: to=gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26119]: hook_dir = '/var/qmail//handlers/before-queue'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26119]: recipient[3] = 'gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26119]: handlers dir = '/var/qmail//handlers/before-queue/recipient/gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26116]: from=qomlbrqew@boulderhomebuying.com
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26116]: to=gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26116]: hook_dir = '/var/qmail//handlers/before-queue'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26116]: recipient[3] = 'gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26116]: handlers dir = '/var/qmail//handlers/before-queue/recipient/gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26100]: from=qomlbrqew@boulderhomebuying.com
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26113]: Handlers Filter before-queue for qmail started ...
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26105]: from=qomlbrqew@boulderhomebuying.com
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26105]: to=bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26107]: from=qomlbrqew@boulderhomebuying.com
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26107]: to=bvkm1@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-local-handlers[26100]: to=bvk2@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26113]: from=qomlbrqew@boulderhomebuying.com
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26113]: to=gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26113]: hook_dir = '/var/qmail//handlers/before-queue'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26113]: recipient[3] = 'gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Sep 29 15:39:46 MEINSERVER qmail-queue-handlers[26113]: handlers dir = '/var/qmail//handlers/before-queue/recipient/gf@ANDERE_DOMAIN_AUF_MEINEM_SERVER'
Dieses "unable to stat" wiederholt sich auch öfter mit den selben Message-IDs, allerdings habe ich eigentlich "qmqtool -r" laufen. Sollte ich das lieber raus nehmen?
Top
Post Reply

Return to “Security”