From: Kevin Pang (no email)
Date: Sun May 15 2005 - 13:50:56 EDT
> > The spam email entry in the log file look like:
> > May 14 14:55:03 pang postfix/smtp[46011]: EC0C595C90: to=<>,
> > relay=mail2.iecc.com[208.31.42.98], delay=724, status=sent (250 ok
> > 1116100192 qp 2255)
> >
> > What kind of information can I get from it? It would be great if I can
> > find which script the spammer used, then I can remove it and start my
> > mail server again. Also probably find how the spammer achieve it.
>
>
> You need to include the relevant few lines preceding that line from the
> maillog as well, (the ones which pertain to that actual delivery). Thatdd
> line merely says where it went, not by whom, or how, it was submitted.
>
>
> Matt
I added more lines on the page: http://www.vokaboly.de/temp/postfix.html ,
(I don't post here due to the mailing-list achieves)
Could you or anyone else please have a look? Thanks!
Kevin
|
|
|