PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : Sicherheitsproblem??



Samson
19.01.03, 19:00
Hi Leute, hab da was erschreckendes entdeckt in meinen Logfiles:

Jan 19 19:01:04 Mars postfix/smtp[3384]: connect to superconnect.de[192.67.198.52]: Connection timed out (port 25)
Jan 19 19:01:04 Mars postfix/smtp[3384]: 02C9716F8E: to=<joul_366@superconnect.de>, relay=none, delay=240007, status=deferred (connect to superconnect.de[192.67.198.52]: Connection timed out)
Jan 19 19:01:06 Mars postfix/smtp[3403]: connect to to.nu[64.55.105.9]: Connection timed out (port 25)
Jan 19 19:01:06 Mars postfix/smtp[3403]: connect to to.nu[212.181.91.6]: Connection refused (port 25)
Jan 19 19:01:06 Mars postfix/smtp[3403]: 3066F17145: to=<jousey_68@to.nu>, relay=none, delay=305571, status=deferred (connect to to.nu[212.181.91.6]: Connection refused)
Jan 19 19:01:07 Mars postfix/smtp[3406]: connect to shaw.wave.ca[139.142.2.194]: Connection timed out (port 25)
Jan 19 19:01:07 Mars postfix/smtp[3406]: 349B51746C: to=<journeyhero_119@shaw.wave.ca>, relay=none, delay=254584, status=deferred (connect to shaw.wave.ca[139.142.2.194]: Connection timed out)
Jan 19 19:01:07 Mars postfix/smtp[3409]: connect to www.kgb.cz[212.71.128.63]: Connection timed out (port 25)
Jan 19 19:01:07 Mars postfix/smtp[3409]: connect to ns2.site.cz[212.71.178.129]: Connection refused (port 25)
Jan 19 19:01:07 Mars postfix/smtp[3409]: 3D2A6175A6: to=<jovato_105@kgb.cz>, relay=none, delay=219973, status=deferred (connect to ns2.site.cz[212.71.178.129]: Connection refused)
Jan 19 19:01:07 Mars postfix/smtp[3408]: connect to mailserver1.netscapeonline.co.uk[194.201.52.157]: Connection timed out (port 25)
Jan 19 19:01:08 Mars postfix/smtp[3386]: connect to shaw.wave.ca[139.142.2.194]: Connection timed out (port 25)
Jan 19 19:01:08 Mars postfix/smtp[3386]: 4D2FD1746F: to=<jouni.viander_180@shaw.wave.ca>, relay=none, delay=254447, status=deferred (connect to shaw.wave.ca[139.142.2.194]: Connection timed out)
Jan 19 19:01:08 Mars postfix/smtp[3412]: connect to mailserver.netscapeonline.co.uk[194.201.52.156]: Connection timed out (port 25)
Jan 19 19:01:08 Mars postfix/smtp[3398]: connect to mail.naver.co.id[202.95.140.11]: Connection timed out (port 25)
Jan 19 19:01:08 Mars postfix/smtp[3398]: 20BC9170C8: to=<jovenazo_234@naver.co.id>, relay=none, delay=313604, status=deferred (connect to mail.naver.co.id[202.95.140.11]: Connection timed out)
Jan 19 19:01:08 Mars postfix/smtp[3415]: connect to abbott.ccm.emr.ca[132.156.32.178]: Connection timed out (port 25)
Jan 19 19:01:08 Mars postfix/smtp[3415]: 5533415EBC: to=<jourdainc_232@abbott.ccm.emr.ca>, relay=none, delay=241544, status=deferred (connect to abbott.ccm.emr.ca[132.156.32.178]: Connection timed out)
Jan 19 19:01:09 Mars postfix/smtp[3404]: connect to to.nu[64.55.105.9]: Connection timed out (port 25)
Jan 19 19:01:09 Mars postfix/smtp[3404]: 82BDE1722D: to=<jousey_68@to.nu>, relay=none, delay=300612, status=deferred (connect to to.nu[64.55.105.9]: Connection timed out)
Jan 19 19:01:09 Mars postfix/smtp[3421]: connect to mailserver1.netscapeonline.co.uk[194.201.52.157]: Connection timed out (port 25)
Jan 19 19:01:09 Mars postfix/smtp[3426]: connect to mailserver.netscapeonline.co.uk[194.201.52.156]: Connection timed out (port 25)
Jan 19 19:01:09 Mars postfix/smtp[3420]: connect to mailserver.netscapeonline.co.uk[194.201.52.156]: Connection timed out (port 25)
Jan 19 19:01:10 Mars postfix/smtp[3400]: connect to shaw.wave.ca[139.142.2.194]: Connection timed out (port 25)
Jan 19 19:01:10 Mars postfix/smtp[3400]: F2C47175FF: to=<jouni.viander_180@shaw.wave.ca>, relay=none, delay=213581, status=deferred (connect to shaw.wave.ca[139.142.2.194]: Connection timed out)
Jan 19 19:01:10 Mars postfix/smtp[3402]: connect to mediaone.actwin.com[140.239.226.147]: Connection timed out (port 25)
Jan 19 19:01:10 Mars postfix/smtp[3402]: D6A80173F0: to=<andrew71@mediaone.net>, relay=none, delay=266132, status=deferred (connect to mediaone.actwin.com[140.239.226.147]: Connection timed out)
Jan 19 19:01:10 Mars postfix/smtp[3424]: connect to mail.naver.co.id[202.95.140.11]: Connection timed out (port 25)
Jan 19 19:01:10 Mars postfix/smtp[3424]: E216A17605: to=<jovenazo_234@naver.co.id>, relay=none, delay=212606, status=deferred (connect to mail.naver.co.id[202.95.140.11]: Connection timed out)
Jan 19 19:01:04 Mars postfix/smtp[3384]: connect to superconnect.de[192.67.198.52]: Connection timed out (port 25)


und:


Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 0CBF4BD75: to=<.melissanicjohnso@aol.com>, relay=none, delay=321396, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 0EDF91713B: to=<EM2SWDVPJ@aol.com>, relay=none, delay=309130, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 0E0FD171D3: to=<ROCKNDOGS@aol.com>, relay=none, delay=304753, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 1919D1711A: to=<DARKENTER@aol.com>, relay=none, delay=309803, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 1C9C217155: to=<FUNDIRECT1@aol.com>, relay=none, delay=308826, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 1D62C171EB: to=<SUGARKELLEY@aol.com>, relay=none, delay=303994, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 1D2A6171AD: to=<Ms86Jag@aol.com>, relay=none, delay=305599, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 22BA81718D: to=<MICHAELR96@aol.com>, relay=none, delay=306256, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 226C717198: to=<MORTAR1986@aol.com>, relay=none, delay=306147, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 2B867171E3: to=<SKSPRN@aol.com>, relay=none, delay=304096, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 2D3DD171EA: to=<STEVEN13A@aol.com>, relay=none, delay=304028, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 2EB0E171B3: to=<SLVMN4YOU@aol.com>, relay=none, delay=304149, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 32B87CCAA: to=<TAPPTHATREAR@aol.com>, relay=none, delay=303541, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 35F92170F2: to=<ALEXANDERCONNELL@aol.com>, relay=none, delay=311353, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 35E6A171CF: to=<RGrandal@aol.com>, relay=none, delay=304790, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:58:59 Mars postfix/nqmgr[3377]: 376EE16D9E: to=<SK300BOWL@aol.com>, relay=none, delay=304177, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:59:00 Mars postfix/nqmgr[3377]: 373D017118: to=<DAVEAT511@aol.com>, relay=none, delay=309837, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:59:00 Mars postfix/nqmgr[3377]: 3FC5317140: to=<ETHIUR@aol.com>, relay=none, delay=309095, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:59:00 Mars postfix/nqmgr[3377]: 45FAA17159: to=<GOLDMANTOPGUN@aol.com>, relay=none, delay=308618, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:59:00 Mars postfix/nqmgr[3377]: 456A6171AB: to=<NAVY666@aol.com>, relay=none, delay=305716, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:59:00 Mars postfix/nqmgr[3377]: 4A31117130: to=<ELNENECHULO18@aol.com>, relay=none, delay=309142, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)
Jan 19 18:59:00 Mars postfix/nqmgr[3377]: 4A46717104: to=<BLKJKSD@aol.com>, relay=none, delay=310933, status=deferred (connect to mailin-02.mx.aol.com[64.12.136.89]: server refused mail service)


Kann mir wer erklären, was der ******* soll??
Des geht jetzt schon seit 3 Tagen so!

Des ganze passiert auf meim Server, der mit DSL am Netzhängt (normal 24h..) und auch per dynamic DNS erreichbar ist!
Kann mir keinen Reim darauf machen, wer bzw was da los ist! Hab jetzt auch schon mein Firewallscript ausgetauscht durch eins, des eigentlich so alles dicht macht, was nutzlos offensteht - leider ohne erkennbaren Erfolg...

cu,
Samson

mpphp
19.01.03, 22:34
hallo,

nur ein tipp: sagt "mailq" irgendetwas über eine feststeckende mail
andernfalls geh mal unter
/var/spool/postfix/
und prüfe per "du -sh" ob ein verzeichnis etwas enthält

# cd /var/spool/postfix
# du -sh *

wichtig sind "active/, deferred/, defer/
falls diese etwas anzeigen, dann mach mal

rm -r active/* deferred/* defer/*

ist nur ein versuch

grüße, mark

Samson
19.01.03, 23:20
Hm...

angezeigt hat er mir was....
Hab des Problem auch noch in nem anderen Forum gepostet - dort hat mir jemand den Tip gegeben, die Queue zu löschen - 198 Mails waren dort noch in der Warteschleife!!
Ausserdem hab ich jetzt auch meine Firewall dicht gemacht - seit ungefähr 3 Stunden is jetzt Ruhe... Mal schaun ob des auch so bleibt :-/

Trotzdem Danke für den Tip!

cu,
Samson