Nie jesteś zalogowany.
Jeśli nie posiadasz konta, zarejestruj je już teraz! Pozwoli Ci ono w pełni korzystać z naszego serwisu. Spamerom dziękujemy!
Ogłoszenie
Prosimy o pomoc dla małej Julki — przekaż 1% podatku na Fundacji Dzieciom zdazyć z Pomocą.
Więcej informacji na dug.net.pl/pomagamy/.
#1 2014-04-18 20:56:52
lewyx84 - 
Użytkownik
- lewyx84
- Użytkownik
- Zarejestrowany: 2013-10-29
Dziwny mail od (niby) ovh.fr
Cześć,
dzisiaj jeden z moich userów dostał maila:
Please carefully read the attached instructions before updating settings. This e-mail and / or any attachment(s) is intended solely for the above-mentioned recipient(s) and it may contain confidential or privileged information. If you have received it in error, please notify us immediately at helpdesk@domain.com and delete the e-mail. You must not copy it, distribute it, disclose it or take any action in reliance on it.
Z logów widać, że:
Kod:
Apr 18 16:28:15 datacenter postfix/qmgr[4091]: A6485E612CA: from=<Administrator@ovh.fr>, size=11054, nrcpt=1 (queue active)
Apr 18 16:28:15 datacenter postfix/qmgr[4091]: 97D6FE61348: from=<Administrator@ovh.fr>, size=11687, nrcpt=1 (queue active)
Apr 18 16:28:15 datacenter amavis[31358]: (31358-18) Passed BANNED (.exe,OutlookSettings.scr) {RelayedTaggedOutbound}, LOCAL [109.190.36.139]:64550 [109.190.36.139] <Administrator@ovh.fr> -> <biuro@domain.com>, Queue-ID: A6485E612CA, Message-ID: <3I2BC5RGOFTE41ET774VCDSJGA7DCFCP3P6VD0J@ovh.fr>, mail_id: pp2IriiwxobO, Hits: -0.01, size: 11051, queued_as: 97D6FE61348, 593 ms
Apr 18 16:36:04 datacenter postfix/qmgr[4091]: 5B9E1E6132F: from=<Administrator@obolo.com>, size=10979, nrcpt=1 (queue active)
Apr 18 16:36:05 datacenter postfix/qmgr[4091]: 6D0F3E6134C: from=<Administrator@obolo.com>, size=11612, nrcpt=1 (queue active)Poniżej widać również:
Kod:
Apr 18 16:36:05 datacenter postfix/qmgr[4091]: 6D0F3E6134C: from=<Administrator@obolo.com>, size=11612, nrcpt=1 (queue active)
Apr 18 16:36:05 datacenter amavis[31358]: (31358-19) Passed BANNED (.exe,OutlookSettings.scr) {RelayedTaggedOutbound}, LOCAL [14.160.13.250]:54610 [14.160.13.250] <Administrator@obolo.com> -> <biuro@domain.com>, Queue-ID: 5B9E1E6132F, Message-ID: <9V8P19E69HK28LCQK43P124VRILOTIFB9DPR8X8@>, mail_id: qmj69zAgV2ms, Hits: 2.442, size: 10976, queued_as: 6D0F3E6134C, 657 ms
Apr 18 18:09:37 datacenter postfix/smtpd[32640]: NOQUEUE: reject: RCPT from unknown[94.198.210.38]: 554 5.7.1 <host130-250-static.59-79-b.business.telecomitalia.it>: Helo command rejected: ACCESS DENIED. Your email was rejected because the sending mail server does not identify itself correctly (business.telecomitalia.it); from=<Administrator@obkcg.com> to=<biuro@domain..com> proto=ESMTP helo=<host130-250-static.59-79-b.business.telecomitalia.it>
Apr 18 18:11:16 datacenter postfix/qmgr[4091]: B4A3BE6112E: from=<Administrator@ok1rr.com>, size=11074, nrcpt=1 (queue active)
Apr 18 18:11:17 datacenter postfix/qmgr[4091]: 2F904E6134D: from=<Administrator@ok1rr.com>, size=11707, nrcpt=1 (queue active)
Apr 18 18:11:17 datacenter amavis[28800]: (28800-01) Passed BANNED (.exe,OutlookSettings.scr) {RelayedTaggedOutbound}, LOCAL [86.61.73.25]:17489 [86.61.73.25] <Administrator@ok1rr.com> -> <biuro@domain..com>, Queue-ID: B4A3BE6112E, Message-ID: <N7MU6FL97HNP7A49M9Y765AGE8EBBFKAQFRH3L1@siol.net>, mail_id: TBkeuGjtGMvE, Hits: 0, size: 11071, queued_as: 2F904E6134D, 718 msCzy to wina postfixa na serwerze, że przepuścił takiego maila?
Offline