Fehler in Spamassassin
Posted: 2004-07-14 01:58
Hallo,
nach mehreren erfolglosen Versuchen meinen Spamassassin-Filter in Gang zu bekommen, wende ich mich jetzt an euch.
Ich hoffe, dass Ihr mir helfen könnt!
Zum Problem:
Sobald eine Spam E-Mail ankommt, wird diese gefiltert. Spamassassin schreibt den Header um und nimmt die eigentliche E-Mail zu den Anhängen.
Das Problem ist, dass ich diese vorgehensweise nicht will und bei einigen E-Mail-Adressen über Confixx Webmail auch andere Optionen eingestellt habe.
Das Problem berücksichtigt diese Einstellungen nicht. Egal welche Optionen man ändern, dass Programm läuft nur im Standard-Modus.
Hier die local.cf
In der local.cf konnte ich keine Fehler feststellen. Auch die MySQL-Datenbank existiert und die jeweiligen User-Einstellungen in der Datenbank sind vorhanden.
Hier die confixx_main.conf
master.cf von Postfix
Hier die Logs:
warn.log
Erklärung: Das connection refused kommt deshalb zustande, weil spamd nicht gestartet war. Diese Problem habe ich aber bereits gelöst. Ansonsten ist in der Log nichts auffälliges.
mail.log
Der Grund, warum ich den Servernamen und die E-Mail-Adressen in XXX umgewandelt habe ist, dass ich schon einmal Opfer eines Hacker-Angriffs geworden bin und deshalb bin ich jetzt etwas vorsichtiger. SORRY
Falls Ihr sonst noch Logs oder Config-Files benötigt, werde ich diese hier posten.
Ich hoffe, dass Ihr mir bei diesem Problem helfen könnt und wäre für jede Antwort dankbar. :)
Bis dann
DerPalit :lol:
nach mehreren erfolglosen Versuchen meinen Spamassassin-Filter in Gang zu bekommen, wende ich mich jetzt an euch.
Ich hoffe, dass Ihr mir helfen könnt!
Zum Problem:
Sobald eine Spam E-Mail ankommt, wird diese gefiltert. Spamassassin schreibt den Header um und nimmt die eigentliche E-Mail zu den Anhängen.
Das Problem ist, dass ich diese vorgehensweise nicht will und bei einigen E-Mail-Adressen über Confixx Webmail auch andere Optionen eingestellt habe.
Das Problem berücksichtigt diese Einstellungen nicht. Egal welche Optionen man ändern, dass Programm läuft nur im Standard-Modus.
Hier die local.cf
Code: Select all
################### CONFIXX SPAMASSASSIN CONFIG FILE #####################
# created at Wed Jul 14 00:49:01 2004
#
# !!! Do not make any changes in this file !!!
# All your changes will be lost after the file is auto updated next time.
#
# If you want to add here any custom directive, you should include it
# to '/root/confixx/safe/spamassassin.inc' file. Its content will be automatically
# included here during the file is autoupdated.
##########################################################################
# START CUSTOM INCLUSION (see /root/confixx/safe/spamassassin.inc)
# SpamAssassin config file for version 2.5x
# generated by http://www.yrex.com/spam/spamconfig.php (version 1.01)
# How many hits before a message is considered spam.
required_hits 5.0
# Whether to change the subject of suspected spam
rewrite_subject 1
# Text to prepend to subject if rewrite_subject is used
subject_tag SPAM:
# Encapsulate spam in an attachment
report_safe 0
# Use terse version of the spam report
use_terse_report 1
# Enable the Bayes system
use_bayes 1
# Enable Bayes auto-learning
auto_learn 1
# Enable or disable network checks
skip_rbl_checks 0
use_razor2 1
use_dcc 1
use_pyzor 1
# Mail using languages used in these country codes will not be marked
# as being possibly spam in a foreign language.
ok_languages all
# Mail using locales used in these country codes will not be marked
# as being possibly spam in a foreign language.
ok_locales all
# END OF CUSTOM INCLUSION
# START CONFIXX GENERATED SECTION
###
user_scores_dsn DBI:mysql:confixxdb:localhost;mysql_socket=/var/lib/mysql/mysql.sock
user_scores_sql_username confixxuser
user_scores_sql_password muss nicht jeder wissen *ggg*
user_scores_sql_table spampref
# END OF CONFIXX GENERATED SECTIONHier die confixx_main.conf
Code: Select all
#### CONFIXX MAIN CONFIGFILE ####
#### created Wed Jul 14 00:32:57 2004 ###
## general
# e.g. Linux, FreeBSD
$OSTYPE = 'Linux';
# Confixx Version
$version = '3.0.2';
# location of webusers homedirs
$user_homeDir = '/home/htdocs';
# directory where Confixx is installed
$installDir = '/root/confixx';
# users with shell access get this shell
$stdShell = '/bin/bash';
# group of Confixx webusers
$userGroup = 'ftponly';
# group of Confixx mailusers
$popGroup = 'poponly';
# uid of userGroup
$giduser = '102';
# uid of popGroup
$gidpop = '103';
# location of passwd file
$passwdDir = '/etc/passwd';
# location of shadow file
$shadowDir = '/etc/shadow';
# location of group file
$groupDir = '/etc/group';
# lowest uid for users created with Confixx
$min_uid = '772';
# highest uid for users created with Confixx
$max_uid = '65000';
# local hostname
$hostname = 'pXXX.pureserver.info';
# location of pidfiles for Confixx programs
$PIDDir = '/root/confixx/run';
# prefix for all Confixx users
$user_prefix = 'c1234';
# language for all shell based Confixx applications
$language = 'de';
# compatible languagefiles need to be greater or equals
$langfileversion = '3.0.2';
# files used for DirectoryIndex if WAP is activated (seperated by :)
$index_wap = '';
# files used for DirectoryIndex if PHP is activated (seperated by :)
$index_php = '';
# files used for DirectoryIndex if SSI is activated (seperated by :)
$index_ssi = '';
# files used for DirectoryIndex (seperated by :)
$index_html = '';
# show mail traffic in webinterface
$show_emailtransfer = '0';
# max number of possible email recipients in webinterface
$max_emailrcpts = '10';
# disable usage of md5 for passwords
$disable_md5 = '0';
# compatibility for Virtuozzo (default is 0)
$virtuozzo = '0';
# create /home/www/web1/./ passwd entries (e.g. ssh-chroot)
$dot_passwd = '0';
## process management
# pm_*_reload: full command to be used to reload daemon, if empty Confixx uses signals
# pm_*_start: full command to be used to stard daemon, if not running _after_ reload
# pm_*_user: username of process (used for finding process to send signal)
# pm_*_name: name of process (used for finding process to send signal)
$pm_apache_reload = '/etc/init.d/apache2 reload';
$pm_apache_start = '/etc/init.d/apache2 start';
$pm_apache_user = '';
$pm_apache_name = '';
$pm_mail_reload = '';
$pm_mail_start = '';
$pm_mail_user = '';
$pm_mail_name = '';
$pm_bind_reload = '/etc/init.d/named reload';
$pm_bind_start = '/etc/init.d/named start';
$pm_bind_user = '';
$pm_bind_name = '';
$pm_spamassassin_reload = '/etc/init.d/spamd restart';
$pm_spamassassin_start = '/etc/init.d/spamd start';
$pm_spamassassin_user = '';
$pm_spamassassin_name = '';
$pm_ftpd_noscript = '';
$pm_ftpd_reload = '';
$pm_ftpd_start = '';
## apache
# group used by Apache (Group in httpd.conf!)
$apacheGroup = 'www';
# rotate logfile if greater than value (kb) after analysis
$apacheBackupSize = '10240';
# day on which logfiles will be rotated, ignoring size on this day (0=Sun, set to 8 to disable)
$apacheBackupDay = '1';
# 1: rotate logfiles in user's homedir, 0: rotate to $apacheBackupDir
$apacheBackupLocal = '1';
# keep _old_ logfiles for X days
$apacheBackupExpire = '90';
# location where to keep rotated logfiles (if not user's homedir)
$apacheBackupDir = '/var/log/apache2/old';
# location of general Apache logfiles for Confixx and symlinks to user's logfiles
$apacheLogDir = '/var/log/apache2/confixx';
# value used as <IfDefine value> for ssl entries in confixx_vhost.conf, defaults to SSL
$apacheDefSSL = 'SSL';
# Confixx web pages user's homedir
$confixx_homeDir = '/srv/www/confixx';
# location of Confixx web pages
$confixx_htmlDir = '/srv/www/confixx/html';
# location of Confixx web cgis
$confixx_cgiDir = '/srv/www/confixx/html/cgi-bin';
# location of Confixx web pages temporary dir (e.g. php upload)
$confixx_tmpDir = '/srv/www/confixx/tmp';
# location of Confixx web pages bin dir
$confixx_binDir = '/srv/www/confixx/bin';
# location of Confixx web pages sbin dir
$confixx_sbinDir = '/srv/www/confixx/sbin';
# location of Apache's httpd.conf
$httpd_conf = '/etc/apache2/httpd.conf';
# location of Confixx vhosts file for Apache (included by mhost.conf)
$vhost_conf = '/etc/apache2/confixx_vhost.conf';
# location of Confixx main Apache config file (included by httpd.conf)
$mhost_conf = '/etc/apache2/confixx_mhost.conf';
# uid of $apacheGroup
$gidapache = '8';
# uid of Confixx web pages user
$confixx_uid = '768';
# gid of Confixx web pages user
$confixx_gid = '501';
# name of Confixx web pages user
$confixx_user = 'confixx';
# group of Confixx web pages user
$confixx_group = 'confixx';
# location of ssl .key files
$sslKeyDir = '/etc/httpd/ssl.key';
# location of ssl .crt files
$sslCrtDir = '/etc/httpd/ssl.crt';
# location if fpfake.conf (FrontPage Apache config file)
$fpfake = '/etc/apache2/fpfake';
# location of FrontPage installation
$fp_homeDir = '/usr/local/frontpage';
# uid of FrontPage files
$fp_uid = '1';
# gid of FrontPage files
$fp_gid = '1';
# Apache base dir for config files (has subdirectory conf!)
$apache_root = '/etc/apache2';
# have seperate /cgi-bin/ for subdomains
$local_cgi = '';
# disable "AllowOverride All" for FrontPage webs (requires patched FrontPage)
$secure_fp = '';
# do not write NameVirtualHost for list of ips (seperated by :)
$excludeNVH = '';
# number of bytes to be added to every entry in Apache logfile analysis (default is 0!)
$httpbytes = '0';
# type of webserver ( apache1.3 | apache2.0 )
$httpd = 'apache2.0';
## email
# used mta ( sendmail | postfix | qmail )
$mta = 'postfix';
# location of mailspool directory
$mailSpool = '/var/spool/mail';
# type of maildrop ( /var/spool/mail/USER | HOMEDIR/Mailbox | HOMEDIR/Maildir/ )
$maildrop = '';
# name of Mailbox file
$mailBoxName = '';
# location of email virtusertable file
$virtUserTableDB = '/etc/postfix/confixx_virtualUsers';
# location of email local domains file
$localDomainsFile = '/etc/postfix/confixx_localDomains';
# location of makemap binary (sendmail only)
$bin_makemap = '';
# location of postmap binary (postfix only)
$bin_postmap = '/usr/sbin/postmap';
# location of postfix binary (postfix only)
$bin_postfix = '/usr/sbin/postfix';
# location of newaliases binary (sendmail & postfix)
$bin_newaliases = '/usr/bin/newaliases';
# location of mta main config file
$MailConfigFile = '/etc/postfix/main.cf';
# location of mail users homedir
$pop_homeDir = '';
# location of aliases binary (sendmail & postfix)
$aliases = '/etc/aliases';
# location of autoresponder.pl
$bin_autorespond = '/usr/bin/autoresponder.pl';
# XXX
$use_autorespond = '1';
# uid used by mta to run local scripts (e.g. autoresponder.pl)
$mta_uid = '51';
# gid used by mta to run local scripts (e.g. autoresponder.pl)
$mta_gid = '51';
# location of sendmail binary (to send mails from local)
$bin_sendmail = '/usr/sbin/sendmail';
# mail users get real homedir (ignoring $maildrop)
$mail_realHome = '';
# 1: mta is on localhost, 0: mta is on remote host
$mail_server = '1';
# XXX
$bin_confixxevent = '';
# XXX
$use_events = '1';
## scponly
# shell used for scp/sftp feature
$scponly_shell = '';
# name of directory in $user_homeDir with chroot-environment
$scponly_chroot = '';
## maillist
# directory where majordomo is installed
$majordomo_home = '/usr/lib/majordomo';
# location of majordomo wrapper binary
$majordomo_wrapper = '/usr/lib/majordomo/wrapper';
# majordomo mailinglists dir
$majordomo_ldir = '/usr/lib/majordomo/lists';
# majordomo username
$majordomo_user = 'mdom';
## IDN support
# XXX
$idn_shell = '/usr/local/bin/idnconv';
# XXX
$idn_vendor = 'idnkit';
# XXX
$iconv_shell = '';
## spam protection
# XXX
$spamassassin_support = '1';
# path to spamassassin configuration file (local.cf)
$spamassassinConfig = '/etc/mail/spamassassin/local.cf';
# set this argument to the uid under which you spamassassin daemon is running
# (check '-u' option of 'spamd')
# if no value specified, than it is supposed then your spamd is running
# under the root user
$spamassassinUid = '';
## cold fusiomn
# XXX
$coldfusion_support = '1';
## cronjobs
# XXX
$cronjobs_support = '1';
## bins
# location of find binary
$bin_find = '/usr/bin/find';
# location of cp binary
$bin_cp = '/bin/cp';
# location of grep binary
$bin_grep = '/bin/grep';
# location of chown binary
$bin_chown = '/bin/chown';
# location of chmod binary
$bin_chmod = '/bin/chmod';
# location of rm binary
$bin_rm = '/bin/rm';
# location of du binary
$bin_du = '/usr/bin/du';
# location of ifconfig binary
$bin_ifconfig = '/sbin/ifconfig';
# location of webalizer binary
$bin_webalizer = '/usr/bin/webalizer';
# location of FrontPage binary (fpsrvadm.exe for 2000, owsadm.exe for 2002)
$bin_fpsrvadm = '/usr/local/frontpage/version5.0/bin/owsadm.exe';
# location of openssl binary
$bin_openssl = '/usr/bin/openssl';
# location for psql binary (if PostgreSQL is used)
$bin_psql = '';
# location of mysql binary
$bin_mysql = '/usr/bin/mysql';
# location of gzip binary
$bin_gzip = '/bin/gzip';
# location of tar binary
$bin_tar = '/bin/tar';
# location of unzip binary
$bin_unzip = '/usr/bin/unzip';
# XXX
$bin_iconv = '';
# XXX
$bin_idn = '';
# XXX
$bin_su = '/bin/su';
#quota
$use_quota = '1';
$mail_quota = '0';
$user_quota = '1';
$majordomo_quota = '0';
$inode_std = '0';
# ftp
$ftpDaemon = 'vsftpd';
$ftpConfFile = '/etc/vsftpd.conf';
$ftpLogFile = '/var/log/xferlog';
$ftpbytes = '0';
$chrootUsers = '/etc/chrootUsers';
$ftpEmail = '';
# dbs
$dbType = 'mysql';
$dbServer = 'localhost';
$dbUser = 'confixxuser';
$dbPw = 'streng geheim *ggg*';
$dbDB = 'confixxdb';
$mysqlUserServer = 'localhost';
$mysqlUserUser = 'root';
$mysqlUserPw = 'darf keiner wissen *ggg*';
$mysql_homeDir = '/var/lib/mysql';
$use_mysqlshell = '0';
$mysql_host = 'localhost';
$mysql_sock = '/var/lib/mysql/mysql.sock';
# cgis
$mail_pop3Server = 'localhost';
# dns
$dns_server = '1';
$dns_type = 'bind';
$dns_dir = '/var/lib/named';
$dns_extension = '.db';
$dns_configure = '/etc/named.conf';
$dns_serverid = '1';
$rpm_version_flag = '0';
$no_questions_mode = '0';
##
$no_pipelog_mode = '0';
## confixx updates
$new_version_url = 'http://updates.confixx.de/';
### ENDE ####
$db_address = 'DBI:mysql:confixxdb:localhost;mysql_socket=/var/lib/mysql/mysql.sock';master.cf von Postfix
Code: Select all
#
# Postfix master process configuration file. Each logical line
# describes how a Postfix daemon program should be run.
#
# A logical line starts with non-whitespace, non-comment text.
# Empty lines and whitespace-only lines are ignored, as are comment
# lines whose first non-whitespace character is a `#'.
# A line that starts with whitespace continues a logical line.
#
# The fields that make up each line are described below. A "-" field
# value requests that a default value be used for that field.
#
# Service: any name that is valid for the specified transport type
# (the next field). With INET transports, a service is specified as
# host:port. The host part (and colon) may be omitted. Either host
# or port may be given in symbolic form or in numeric form. Examples
# for the SMTP server: localhost:smtp receives mail via the loopback
# interface only; 10025 receives mail on port 10025.
#
# Transport type: "inet" for Internet sockets, "unix" for UNIX-domain
# sockets, "fifo" for named pipes.
#
# Private: whether or not access is restricted to the mail system.
# Default is private service. Internet (inet) sockets can't be private.
#
# Unprivileged: whether the service runs with root privileges or as
# the owner of the Postfix system (the owner name is controlled by the
# mail_owner configuration variable in the main.cf file). Only the
# pipe, virtual and local delivery daemons require privileges.
#
# Chroot: whether or not the service runs chrooted to the mail queue
# directory (pathname is controlled by the queue_directory configuration
# variable in the main.cf file). Presently, all Postfix daemons can run
# chrooted, except for the pipe, virtual and local delivery daemons.
# The proxymap server can run chrooted, but doing so defeats most of
# the purpose of having that service in the first place.
# The files in the examples/chroot-setup subdirectory describe how
# to set up a Postfix chroot environment for your type of machine.
#
# Wakeup time: automatically wake up the named service after the
# specified number of seconds. A ? at the end of the wakeup time
# field requests that wake up events be sent only to services that
# are actually being used. Specify 0 for no wakeup. Presently, only
# the pickup, queue manager and flush daemons need a wakeup timer.
#
# Max procs: the maximum number of processes that may execute this
# service simultaneously. Default is to use a globally configurable
# limit (the default_process_limit configuration parameter in main.cf).
# Specify 0 for no process count limit.
#
# Command + args: the command to be executed. The command name is
# relative to the Postfix program directory (pathname is controlled by
# the daemon_directory configuration variable). Adding one or more
# -v options turns on verbose logging for that service; adding a -D
# option enables symbolic debugging (see the debugger_command variable
# in the main.cf configuration file). See individual command man pages
# for specific command-line options, if any.
#
# In order to use the "uucp" message tranport below, set up entries
# in the transport table.
#
# In order to use the "cyrus" message transport below, configure it
# in main.cf as the mailbox_transport.
#
# SPECIFY ONLY PROGRAMS THAT ARE WRITTEN TO RUN AS POSTFIX DAEMONS.
# ALL DAEMONS SPECIFIED HERE MUST SPEAK A POSTFIX-INTERNAL PROTOCOL.
#
# DO NOT SHARE THE POSTFIX QUEUE BETWEEN MULTIPLE POSTFIX INSTANCES.
#
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - n - - smtpd
smtps inet n - n - - smtpd
-o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#submission inet n - n - - smtpd
# -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
#628 inet n - n - - qmqpd
pickup fifo n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
#qmgr fifo n - n 300 1 nqmgr
#tlsmgr fifo - - n 300 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - n - - smtp
#relay unix - - n - - smtp
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - n - - showq
error unix - - n - - error
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
#localhost:10025 inet n - n - - smtpd -o content_filter=
#
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# maildrop. See the Postfix MAILDROP_README file for details.
#
#maildrop unix - n n - - pipe
# flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
cyrus unix - n n - - pipe
user=cyrus argv=/usr/lib/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
vscan unix - n n - 10 pipe
user=vscan argv=/usr/sbin/amavis ${sender} ${recipient}
procmail unix - n n - - pipe
flags=R user=nobody argv=/usr/bin/procmail -t -m /etc/procmailrc ${sender} ${recipient}warn.log
Code: Select all
Jul 13 03:00:02 pXXX spamc[3052]: connect() to spamd at 127.0.0.1 failed, retrying (1/3): Connection refused
Jul 13 03:00:03 pXXX spamc[3052]: connect() to spamd at 127.0.0.1 failed, retrying (2/3): Connection refused
Jul 13 03:00:04 pXXX spamc[3052]: connect() to spamd at 127.0.0.1 failed, retrying (3/3): Connection refused
Jul 13 03:00:05 pXXX spamc[3052]: connection attempt to spamd aborted after 3 retries
Jul 13 07:30:54 pXXX spamc[5002]: connect() to spamd at 127.0.0.1 failed, retrying (1/3): Connection refused
Jul 13 07:30:55 pXXX spamc[5002]: connect() to spamd at 127.0.0.1 failed, retrying (2/3): Connection refused
Jul 13 07:30:56 pXXX spamc[5002]: connect() to spamd at 127.0.0.1 failed, retrying (3/3): Connection refused
Jul 13 07:30:57 pXXX spamc[5002]: connection attempt to spamd aborted after 3 retries
Jul 13 10:03:06 pXXX spamc[6022]: connect() to spamd at 127.0.0.1 failed, retrying (1/3): Connection refused
Jul 13 10:03:07 pXXX spamc[6022]: connect() to spamd at 127.0.0.1 failed, retrying (2/3): Connection refused
Jul 13 10:03:08 pXXX spamc[6022]: connect() to spamd at 127.0.0.1 failed, retrying (3/3): Connection refused
Jul 13 10:03:09 pXXX spamc[6022]: connection attempt to spamd aborted after 3 retries
Jul 13 11:39:50 pXXX spamc[6661]: connect() to spamd at 127.0.0.1 failed, retrying (1/3): Connection refused
Jul 13 11:39:51 pXXX spamc[6661]: connect() to spamd at 127.0.0.1 failed, retrying (2/3): Connection refused
Jul 13 11:39:52 pXXX spamc[6661]: connect() to spamd at 127.0.0.1 failed, retrying (3/3): Connection refused
Jul 13 11:39:53 pXXX spamc[6661]: connection attempt to spamd aborted after 3 retries
Jul 13 15:25:04 pXXX spamc[8162]: connect() to spamd at 127.0.0.1 failed, retrying (1/3): Connection refused
Jul 13 15:25:05 pXXX spamc[8162]: connect() to spamd at 127.0.0.1 failed, retrying (2/3): Connection refused
Jul 13 15:25:06 pXXX spamc[8162]: connect() to spamd at 127.0.0.1 failed, retrying (3/3): Connection refused
Jul 13 15:25:07 pXXX spamc[8162]: connection attempt to spamd aborted after 3 retries
Jul 13 17:02:24 pXXX spamc[8849]: connect() to spamd at 127.0.0.1 failed, retrying (1/3): Connection refused
Jul 13 17:02:25 pXXX spamc[8849]: connect() to spamd at 127.0.0.1 failed, retrying (2/3): Connection refused
Jul 13 17:02:26 pXXX spamc[8849]: connect() to spamd at 127.0.0.1 failed, retrying (3/3): Connection refused
Jul 13 17:02:27 pXXX spamc[8849]: connection attempt to spamd aborted after 3 retries
Jul 13 17:22:10 pXXX spamc[8992]: connect() to spamd at 127.0.0.1 failed, retrying (1/3): Connection refused
Jul 13 17:22:11 pXXX spamc[8992]: connect() to spamd at 127.0.0.1 failed, retrying (2/3): Connection refused
Jul 13 17:22:12 pXXX spamc[8992]: connect() to spamd at 127.0.0.1 failed, retrying (3/3): Connection refused
Jul 13 17:22:13 pXXX spamc[8992]: connection attempt to spamd aborted after 3 retries
Jul 13 19:17:21 pXXX sshd[9873]: error: PAM: Authentication failure
Jul 14 00:32:46 pXXX postfix/smtpd[12143]: warning: 216.130.190.145: hostname mx145.tabadodo.com verification failed: Host not found, try again
Jul 14 00:54:55 pXXX postfix/smtpd[12728]: warning: 61.129.188.105: hostname ppp105-188-129-61.online.sh.cn verification failed: Host not foundmail.log
Code: Select all
Jul 14 01:26:15 pXXX spamd[13341]: identified spam (12.3/5.0) for c12340p4:104 in 4.3 seconds, 17718 bytes.
Jul 14 01:26:15 pXXX postfix/local[13337]: 8F991C0017E: to=<c12340p4@pXXX.pureserver.info>, orig_to=<XXX@XXX.de>, relay=local, delay=4, status=sent ("|/usr/bin/procmail")
Jul 14 01:26:17 pXXX popper[13345]: Stats: c12340p4 1 21321 0 0 pD9E02DC4.dip.t-dialin.net 217.224.45.196 [pop_updt.c:296]
Jul 14 01:26:18 pXXX popper[13346]: Stats: c12340p5 0 0 0 0 pD9E02DC4.dip.t-dialin.net 217.224.45.196 [pop_updt.c:296]
Jul 14 01:26:18 pXXX popper[13347]: Stats: c12340p6 0 0 0 0 pD9E02DC4.dip.t-dialin.net 217.224.45.196 [pop_updt.c:296]
Jul 14 01:26:18 pXXX popper[13348]: Stats: c12340p7 0 0 0 0 pD9E02DC4.dip.t-dialin.net 217.224.45.196 [pop_updt.c:296]
Jul 14 01:26:19 pXXX popper[13349]: Stats: c12340p8 0 0 0 0 pD9E02DC4.dip.t-dialin.net 217.224.45.196 [pop_updt.c:296]
Jul 14 01:26:19 pXXX popper[13350]: Stats: c12340p9 0 0 0 0 pD9E02DC4.dip.t-dialin.net 217.224.45.196 [pop_updt.c:296]
Jul 14 01:27:53 pXXX postfix/smtpd[13380]: connect from unknown[195.243.186.250]
Jul 14 01:27:55 p15104961 postfix/smtpd[13380]: 53A79C0017E: client=unknown[195.243.186.250]
Jul 14 01:27:55 p15104961 postfix/smtpd[13380]: 53A79C0017E: reject: RCPT from unknown[195.243.186.250]: 554 <Pstrunk@XXX.de>: Relay access denied; from=<newsletter@maily.de> to=<Pstrunk@XXX.de> proto=ESMTP helo=<mail.maily.de>
Jul 14 01:28:00 p15104961 postfix/smtpd[13380]: disconnect from unknown[195.243.186.250]Der Grund, warum ich den Servernamen und die E-Mail-Adressen in XXX umgewandelt habe ist, dass ich schon einmal Opfer eines Hacker-Angriffs geworden bin und deshalb bin ich jetzt etwas vorsichtiger. SORRY
Falls Ihr sonst noch Logs oder Config-Files benötigt, werde ich diese hier posten.
Ich hoffe, dass Ihr mir bei diesem Problem helfen könnt und wäre für jede Antwort dankbar. :)
Bis dann
DerPalit :lol: