MAILER-DAEMON shows as sender of spam

Question

Level 1

21 points

MAILER-DAEMON shows as sender of spam

Upon checking my mail queue in Server Admin, I see about 100 messages per day that seem to be sent from my Mailer daemon to spam addresses.

Are these bounces from my mail server, or is my mail server spamming these addresses? And is there a need to stop them from going out other than manually deleting them every day?

When I click on such a particular message this is what shows up in "Message Details" window:

Message ID: 1451D4365D29
Date: Wed Jan 17 10:33:03
Size: 6086
Sender: MAILER-DAEMON
Recipient(s) & Status:
----------------------
ykyarmulke@cashcrazymails.com:
connect to cashcrazymails.com[63.251.92.195]: read timeout

Thanks!

Mac OS X (10.4.7)

Posted on Jan 19, 2007 8:13 AM

Reply

Answer 1

Best reply

David_x

Level 4

3,011 points

Jan 19, 2007 9:24 AM in response to tmoldovan

These are bounces to senders of messages that have been rejected by spamassassin as spam. Because the senders address has been spoofed, your server is not finding an MX record for the domain or some other reason for postfix to queue them up for later attempt.

Your server will stop trying after 5 days and discard them. This is set by the default postfix option (in main.cf)...

bounce queuelifetime = 5d

You can reduce this if you want but it otherwise doesn't put a lot of work on the server.

-david

Reply

Answer 2

tmoldovan Author

Level 1

21 points

Jan 19, 2007 10:23 AM in response to David_x

Thank you David.

Reply

Answer 3

David_x

Level 4

3,011 points

Jan 19, 2007 3:07 PM in response to tmoldovan

If you are getting a lot of bounce messages then it could be that you should be rejecting some of them before they get that far. Have a look a "Frontline Defense..." pdf document by Pterobyte on this web link...

http://osx.topicdesk.com/downloads/

-david (disclaimer - no connection just an appreciative beneficial)

Reply