Thanks for the info and links.
I implemented the Frontline spam defense a few weeks back and the Mailer-Daemon messages stayed as they are.
I suppose maybe I am missing something in my configs.
I use the zen, which kills lots of junk, but even with all of these, the backscatter continues.
Here is Postconf -n
alias_maps = hash:/etc/aliases,hash:/var/mailman/data/aliases
always_bcc =
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debug
peerlevel = 2
disable
vrfycommand = yes
enable
serveroptions = yes
inet_interfaces = all
local
recipientmaps = proxy:unix:passwd.byname $alias_maps
luser_relay =
mail_owner = postfix
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
message
sizelimit = 5242880
mydestination = $myhostname,localhost.$mydomain,mail.cysd.k12.pa.us,cysd.k12.pa. us
mydomain = cysd.k12.pa.us
mydomain_fallback = localhost
myhostname = mail.cysd.k12.pa.us
mynetworks = 127.0.0.1/32,10.18.0.0/21,10.19.0.0/16,10.20.0.0/16,10.21.0.0/16,10 .18.8.0/21,10.18.16.0/21,10.22.0.0/16
mynetworks_style = host
myorigin = $myhostname
newaliases_path = /usr/bin/newaliases
owner
requestspecial = no
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relayhost =
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd
clientrestrictions = permit
sasl_authenticated,permitmynetworks hash:/et c/postfix/smtpdreject reject
rblclient zen.spamhaus.org permit
smtpd
datarestrictions = permit
mynetworks,reject_unauthpipelining,permit
smtpd
enforcetls = no
smtpd
helorequired = yes
smtpd
helorestrictions = permit
sasl_authenticated,permit_mynetworks,rejectnon
fqdn_hostname,reject_invalidhostname,permit
smtpd
pw_server_securityoptions = plain,login,cram-md5,gssapi
smtpd
recipientrestrictions = reject
invalid_hostname,reject_non_fqdnsender,re ject
non_fqdn_recipient,permit_sasl_authenticated,permit_mynetworks,rejectunaut h
destination,reject_unlisted_recipient,reject_rblclient zen.spamhaus.org,permi t
smtpd
sasl_authenable = yes
smtpd
senderrestrictions = permit
sasl_authenticated,permit_mynetworks,rejectn on
fqdnsender,permit
smtpd
tlsCAfile = /etc/certificates/mail.cysd.k12.pa.us.chcrt
smtpd
tls_certfile = /etc/certificates/mail.cysd.k12.pa.us.crt
smtpd
tls_keyfile = /etc/certificates/mail.cysd.k12.pa.us.key
smtpd
tlsloglevel = 0
smtpd
use_pwserver = yes
smtpd
usetls = yes
unknown
local_recipient_rejectcode = 550
And a sample of Daemons.
D6397D57AA7 3110 Mon Feb 5 07:56:31 MAILER-DAEMON
(connect to mx2.planeteria.net[206.15.80.80]: Operation timed out)
contacttiqg@terrazassanmiguel.com
D80E5D50DFD 3669 Mon Feb 5 06:00:45 MAILER-DAEMON
(lost connection with ZAAGS.COM[74.202.197.27] while sending end of data -- message may be sent more than once)
bounce@ZAAGS.COM
D9BB0D5142A 3286 Mon Feb 5 06:14:51 MAILER-DAEMON
(Host or domain name not found. Name service error for name=kaiserep.com type=MX: Host not found, try again)
estridgeukwa@kaiserep.com
DCEE4D4FB95 3733 Mon Feb 5 05:07:11 MAILER-DAEMON
(connect to exalumnos.com[200.52.138.235]: Operation timed out)
Burns@exalumnos.com
E0FF1D4C8CD 10123 Mon Feb 5 02:21:41 MAILER-DAEMON
(connect to MAIL.i-gate.net.ph[210.14.0.113]: Connection refused)
hbmifhkvl@pldt.net
E744CD51180 3799 Mon Feb 5 06:09:28 MAILER-DAEMON
(conversation with water.thekwolesgroup.com[216.91.137.239] timed out while sending end of data -- message may be sent more than once)
TicketConfirmation@thekwolesgroup.com
EB769D4D6E7 1005 Mon Feb 5 03:17:37 ""@bestshortcuts.com
(host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=03596-08, spam quar+notif FAILED: Can not quarantine: 501 5.5.0 Rejected by MTA: 501 Bad address syntax, id=03596-08 at /usr/bin/amavisd line 7133. (in reply to end of DATA command))
khudson@cysd.k12.pa.us
EC3F0D4CA81 5901 Mon Feb 5 02:24:44 MAILER-DAEMON
(connect to wbtepw.stingplayerhot.com[64.209.219.79]: Operation timed out)
3-2927212-cysd.k12.pa.us?lestep@wbtepw.stingplayerhot.com
F077CD4B258 15168 Mon Feb 5 00:25:32 MAILER-DAEMON
(connect to mail.hosi.com[80.123.149.26]: Operation timed out)
urrocky@hosi.com
Thanks!
JL
Mac OS X (10.4.8)
