What could means this errors

New to Debian (Or Linux in general)? Ask your questions here!

What could means this errors

Postby pecka33 » 2020-04-01 14:23

Hello all,

I am new in Debian and bought my own vps. I would like to learn something. So i install web server, mail etc., migrate my site from shared hosting and everything working fine. I am using ISPConfig 3.1.7 and my Debian Debian GNU/Linux 9.12 (n/a).

Everything working fine, sending emails, cron tasks etc. But if i take a look to ISP config for example in email log, i can see there test for example

Code: Select all
Apr  1 17:04:39 vm28069 postfix/submission/smtpd[22973]: warning: unknown[193.169.255.130]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr  1 17:04:41 vm28069 postfix/submission/smtpd[22973]: disconnect from unknown[193.169.255.130]
Apr  1 17:05:01 vm28069 postfix/pickup[20875]: BA4EB128C: uid=5004 from=<webmaster@mydomain.com>


Code: Select all
Apr  1 17:00:43 vm28069 postfix/smtpd[21984]: NOQUEUE: filter: RCPT from nwk-txn-msbadger0501.apple.com[17.151.1.68]: <Do_not_reply@id.apple.com>: Sender address triggers FILTER amavis:[127.0.0.1]:10026; from=<Do_not_reply@id.apple.com> to=<lina@schlee.com> proto=ESMTP helo=<nwk-txn-msbadger0501.apple.com>
Apr  1 17:00:43 vm28069 postfix/smtpd[21984]: NOQUEUE: filter: RCPT from nwk-txn-msbadger0501.apple.com[17.151.1.68]: <Do_not_reply@id.apple.com>: Sender address triggers FILTER amavis:[127.0.0.1]:10024; from=<Do_not_reply@id.apple.com> to=<lina@schlee.com> proto=ESMTP helo=<nwk-txn-msbadger0501.apple.com>
Apr  1 17:00:43 vm28069 postfix/smtpd[21984]: NOQUEUE: reject: RCPT from nwk-txn-msbadger0501.apple.com[17.151.1.68]: 454 4.7.1 <lina@schlee.com>: Relay access denied; from=<Do_not_reply@id.apple.com> to=<lina@schlee.com> proto=ESMTP helo=<nwk-txn-msbadger0501.apple.com>


Sometimes i can see there
Code: Select all
Apr  1 16:58:03 vm28069 postfix/smtpd[21984]: NOQUEUE: reject: RCPT from wmsc1-hp4-89-221-213-105.wedos.net[89.221.213.105]: 450 4.7.1 <wmsc1-wms58-wd.wedos.net>: Helo command rejected: Host not found; from=<w157@wmsc1-wms58-wd.wedos.net> to=<admin@mysite.com> proto=ESMTP helo=<wmsc1-wms58-wd.wedos.net>


What should it mean? I have no created webmaster email address webmaster@mydomain.com, so i am not really sure why is there show.

I would like to write here that first my vps has debian jessie with ispconfig panel, but i used manual to make a update to debian 9.

Thank you so much.
pecka33
 
Posts: 4
Joined: 2020-04-01 14:09

Re: What could means this errors

Postby Bloom » 2020-04-01 14:58

You have a Postfix smtp server which is contactable from the internet. The logs show attempts to use your smtp server als a relay, probably with the intent to deliver spam.
If you want to avoid these messages (they are not errors) you need to upgrade your security so that illicit smtp contacts are banned from even trying.
User avatar
Bloom
 
Posts: 296
Joined: 2017-11-11 12:23

Re: What could means this errors

Postby pecka33 » 2020-04-01 16:07

Thank you. I did upgrade of mail version and now looks fine. Thank you :).
pecka33
 
Posts: 4
Joined: 2020-04-01 14:09


Return to Beginners Questions

Who is online

Users browsing this forum: No registered users and 11 guests

fashionable