Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Wed Oct 24, 2012 4:31 pm 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
Hi,
it seems that my server sends emails to a specific email address every day.

There is a user that complaints that he receive the same email three or four times a day
from my server.
If I read my log I see.
Code:
Oct 24 21:30:06 netstar postfix/smtp[32357]: connect to gmail-smtp-in.l.google.com[2607:f8b0:4002:c01::1a]:25: Network is unreachable
Oct 24 21:30:06 netstar postfix/smtp[32357]: 668C540E2: to=<EMAIL ADDRESS OF THE USER>, relay=gmail-smtp-in.l.google.com[74.125.137.27]:25, delay=0.46, delays=0.03/0.01/0.1/0.32, dsn=2.0.0, status=sent (250 2.0.0 OK 1351106998 s27si5929455anh.201)
Oct 24 21:30:06 netstar postfix/qmgr[2111]: 668C540E2: removed


after three or four of this message I can see
Code:
Oct 24 21:52:00 netstar postfix/smtp[32510]: 98B1240E2: to=<EMAIL ADDRESS OF THE USER>, relay=gmail-smtp-in.l.google.com[74.125.137.27]:25, delay=0.48, delays=0.03/0.02/0.12/0.31, dsn=2.0.0, status=sent (250 2.0.0 OK 1351108311 h8si5962513anp.131)
Oct 24 21:52:00 netstar postfix/qmgr[2111]: 98B1240E2: removed


What is this?
It happen with this user only. Why it happen? I don't have any script that automatically send mail to this user, why my server sends email to this user?

Thanks.


Top
   
PostPosted: Wed Oct 24, 2012 4:59 pm 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
I noticed that in my main.cf by default I have:
inet_protocols = all

it seems that it causes the problem with gmail that complaints about
connect to gmail-smtp-in.l.google.com[2607:f8b0:4002:c01::1a]:25: Network is unreachable

is there someone who can explain what is happening here please?


Top
   
PostPosted: Fri Oct 26, 2012 7:04 pm 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
switching to ipv6 the " Network is unreachable" problem but my server still sending email to that address, can't understand why.
any idea?

from the maillog I see this:
Oct 26 23:31:14 netstar postfix/smtp[8198]: CBD7B40E4: to=<EMAIL ADDRESS>, relay=gmail-smtp-in.l.google.com[2607:f8b0:4002:c01::1a]:25, delay=0.65, delays=0.04/0.02/0.09/0.51, dsn=2.0.0, status=sent (250 2.0.0 OK 1351287069 c64si2594695yhh.109)

is there a way to log what process or who sent this email?


Top
   
PostPosted: Fri Oct 26, 2012 10:00 pm 
Offline
Senior Member
User avatar

Joined: Sat Aug 30, 2008 1:55 pm
Posts: 1739
Location: Rochester, New York
Code:
grep CBD7B40E4 maillog

_________________
Code:
/* TODO: need to add signature to posts */


Top
   
PostPosted: Sat Oct 27, 2012 5:30 am 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
hoopycat wrote:
Code:
grep CBD7B40E4 maillog


message from APACHE, why apache send this email?


Top
   
PostPosted: Sat Oct 27, 2012 6:37 am 
Offline
Senior Member

Joined: Sun Mar 07, 2010 7:47 pm
Posts: 1970
Website: http://www.rwky.net
Location: Earth
Sounds like it's coming from a website do you have any PHP sites that send email?

_________________
Paid support
How to ask for help
1. Give details of your problem
2. Post any errors
3. Post relevant logs.
4. Don't hide details i.e. your domain, it just makes things harder
5. Be polite or you'll be eaten by a grue


Top
   
PostPosted: Sat Oct 27, 2012 6:54 am 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
obs wrote:
Sounds like it's coming from a website do you have any PHP sites that send email?



Yes but this website sends email in a protected way very very stringe.
In any case can't be that PHP code since that code forward every email sent to my mailbox.


Top
   
PostPosted: Sat Oct 27, 2012 3:46 pm 
Offline
Junior Member
User avatar

Joined: Tue Dec 27, 2005 1:33 am
Posts: 43
Location: USA
You could try adding this to your main.cf:

Code:
always_bcc = myaddress@example.com


That will cause Postfix to BCC all mail to that address, which could help you figure out what this message is about.


Top
   
PostPosted: Sat Oct 27, 2012 5:10 pm 
Offline
Senior Member
User avatar

Joined: Sun Dec 27, 2009 11:12 pm
Posts: 1038
Location: Colorado, USA
Or he could just have the client that is complaining about the email send him a copy of the full message source.

_________________
Either provide enough details for people to help, or sit back and listen to the crickets chirp.
Security thru obscurity is a myth - and really really annoying.


Top
   
PostPosted: Wed Nov 07, 2012 10:45 am 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
I have just solved, a dummy customer put his username and password on a forum to try other people
generating a new activation code.
Stupid idiot, obviously my server denied the request and resent the wrong activation email code.

I will not stop this, I'm glad that he will receive every wrong activation msg xD


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group