What could means this errors

[pecka33]

Hello all,

I am new in Debian and bought my own vps. I would like to learn something. So i install web server, mail etc., migrate my site from shared hosting and everything working fine. I am using ISPConfig 3.1.7 and my Debian Debian GNU/Linux 9.12 (n/a).

Everything working fine, sending emails, cron tasks etc. But if i take a look to ISP config for example in email log, i can see there test for example

Code: Select all

Apr  1 17:04:39 vm28069 postfix/submission/smtpd[22973]: warning: unknown[193.169.255.130]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr  1 17:04:41 vm28069 postfix/submission/smtpd[22973]: disconnect from unknown[193.169.255.130]
Apr  1 17:05:01 vm28069 postfix/pickup[20875]: BA4EB128C: uid=5004 from=<webmaster@mydomain.com>

Code: Select all

Apr  1 17:00:43 vm28069 postfix/smtpd[21984]: NOQUEUE: filter: RCPT from nwk-txn-msbadger0501.apple.com[17.151.1.68]: <Do_not_reply@id.apple.com>: Sender address triggers FILTER amavis:[127.0.0.1]:10026; from=<Do_not_reply@id.apple.com> to=<lina@schlee.com> proto=ESMTP helo=<nwk-txn-msbadger0501.apple.com>
Apr  1 17:00:43 vm28069 postfix/smtpd[21984]: NOQUEUE: filter: RCPT from nwk-txn-msbadger0501.apple.com[17.151.1.68]: <Do_not_reply@id.apple.com>: Sender address triggers FILTER amavis:[127.0.0.1]:10024; from=<Do_not_reply@id.apple.com> to=<lina@schlee.com> proto=ESMTP helo=<nwk-txn-msbadger0501.apple.com>
Apr  1 17:00:43 vm28069 postfix/smtpd[21984]: NOQUEUE: reject: RCPT from nwk-txn-msbadger0501.apple.com[17.151.1.68]: 454 4.7.1 <lina@schlee.com>: Relay access denied; from=<Do_not_reply@id.apple.com> to=<lina@schlee.com> proto=ESMTP helo=<nwk-txn-msbadger0501.apple.com>

Sometimes i can see there

Code: Select all

Apr  1 16:58:03 vm28069 postfix/smtpd[21984]: NOQUEUE: reject: RCPT from wmsc1-hp4-89-221-213-105.wedos.net[89.221.213.105]: 450 4.7.1 <wmsc1-wms58-wd.wedos.net>: Helo command rejected: Host not found; from=<w157@wmsc1-wms58-wd.wedos.net> to=<admin@mysite.com> proto=ESMTP helo=<wmsc1-wms58-wd.wedos.net>

What should it mean? I have no created webmaster email address webmaster@mydomain.com, so i am not really sure why is there show.

I would like to write here that first my vps has debian jessie with ispconfig panel, but i used manual to make a update to debian 9.

Thank you so much.

[Bloom]

You have a Postfix smtp server which is contactable from the internet. The logs show attempts to use your smtp server als a relay, probably with the intent to deliver spam.
If you want to avoid these messages (they are not errors) you need to upgrade your security so that illicit smtp contacts are banned from even trying.

[pecka33]

Thank you. I did upgrade of mail version and now looks fine. Thank you .