Всем доброго времени. Есть сервер с Ubuntu и Postfix 2.11.0-1ubuntu1.2 Работает уже давно и все вроде было нормально, но сегодня в очереди начали появляться письма который мы не отправляли. В логе это выглядит вот так
Jan 23 13:04:45 ml postfix/smtpd[28312]: 2CAEFC8E624: client=unknown[80.51.181.68], sasl_method=PLAIN, sasl_username=office@mail.com.ua
Jan 23 13:04:46 ml postfix/cleanup[28108]: 2CAEFC8E624: warning: header Subject: ONLINE SHOP - from unknown[80.51.181.68]; from=<office@mail.com> to=<audio71@aol.com> proto=ESMTP helo=<[127.0.0.1]>: Subject
Jan 23 13:04:46 ml postfix/cleanup[28108]: 2CAEFC8E624: message-id=<v1bn4hf-rjzixe-33@mail.com>
Jan 23 13:04:46 ml postfix/qmgr[28013]: 2CAEFC8E624: from=<office@mail.com>, size=1351, nrcpt=5 (queue active)
Jan 23 13:04:49 ml postfix/smtp[28014]: 2CAEFC8E624: to=<audio71@aol.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=4, delays=1.5/0/0.01/2.5, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as F0D4AC8E64E)
Сначала думал что подобрали пароль, но в логах Dovecot который отвечает за авторизацию нет информации и логине. Проверял сервер на Openrelay по всем тестам все Ок релей закрыт.
Вот конфиг Postfix
header_checks = regexp:/etc/postfix/header_checks
mime_header_checks = regexp:/etc/postfix/mime_header_checks
smtpd_banner = $myhostname ESMTP $mail_name
biff = no
append_dot_mydomain = no
readme_directory = no
myhostname = mail..com
mydestination = $myhostname
myorigin = $mydomain
m
ynetworks = 127.0.0.0/8
virtual_mailbox_domains =
$mydomain
mail.com
virtual_mailbox_maps = hash:/etc/postfix/local_mailboxes/valid_users
virtual_alias_maps = hash:/etc/postfix/local_mailboxes/aliases
smtpd_discard_ehlo_keywords = etrn, silent-discard
smtpd_forbidden_commands = CONNECT GET POST
broken_sasl_auth_clients = yes
smtpd_delay_reject = yes
smtpd_helo_required = yes
disable_vrfy_command = yes
default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_helo_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_non_fqdn_helo_hostname,
reject_invalid_helo_hostname,
smtpd_data_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_pipelining,
reject_multi_recipient_bounce,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
reject_unknown_hostname,
smtpd_sender_restrictions = permit_mynetworks,
reject_unknown_sender_domain,
check_sender_access hash:/etc/postfix/local_mailboxes/whitelist,
reject_unverified_sender,
permit_sasl_authenticated,
reject_non_fqdn_sender,
smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/local_mailboxes/access_users, hash:/etc/postfix/local_mailboxes/protected_destinations,
check_sender_access hash:/etc/postfix/local_mailboxes/restricted_senders,
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
reject_multi_recipient_bounce,
reject_unauth_pipelining,
permit_sasl_authenticated,
permit_mynetworks,
reject_unauth_destination,
reject_rbl_client zen.spamhaus.org,
reject_rbl_client bl.spamcop.net,
reject_invalid_hostname,
permit_auth_destination,
reject
smtpd_restriction_classes = local_only ,insiders_only
local_only = check_recipient_access hash:/etc/postfix/local_mailboxes/local_domains, reject
insiders_only = check_sender_access hash:/etc/postfix/local_mailboxes/local_domains, reject
# ============================================================
# TLS
# ============================================================
smtp_tls_security_level = may
smtpd_tls_security_level = may
smtpd_tls_loglevel = 1
smtpd_use_tls = yes
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 300s
smtp_tls_session_cache_database = btree:$data_directory/smtp_tls_session_cache
smtpd_tls_key_file = /etc/postfix/certs/key.pem
smtpd_tls_cert_file = /etc/postfix/certs/cert.pem
tls_random_source = dev:/dev/urandom
# ============================================================
# LIMITS
# ============================================================
message_size_limit = 251200000
mailbox_size_limit = 25120000000
smtpd_soft_error_limit = 10
smtpd_hard_error_limit = 15
smtpd_error_sleep_time = 20
anvil_rate_time_unit = 5m
smtpd_client_connection_count_limit = 100
smtpd_client_connection_rate_limit = 90
smtpd_client_message_rate_limit = 80
smtpd_client_recipient_rate_limit = 50
smtpd_client_event_limit_exceptions = 127.0.0.1/8
smtpd_client_connection_limit_exceptions = 127.0.0.1/8
line_length_limit = 4096
# ============================================================
# QUEUE
# ============================================================
maximal_queue_lifetime = 5d
bounce_queue_lifetime = 2d
# ============================================================
# SASL
# ============================================================
smtpd_sasl_auth_enable = yes
smtpd_sender_login_maps = hash:/etc/postfix/local_mailboxes/aliases
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = noanonymous
smtpd_tls_auth_only = yes
smtpd_sasl_local_domain = MAIL.COM
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
# ============================================================
# VIRTUAL
# ============================================================
virtual_mailbox_base = /var/vmail
virtual_minimum_uid = 1001
virtual_uid_maps = static:1001
virtual_gid_maps = static:1001
virtual_transport = dovecot
dovecot_destination_recipient_limit = 1
sender_bcc_maps = hash:/etc/postfix/local_mailboxes/sender_bcc
recipient_bcc_maps = hash:/etc/postfix/local_mailboxes/recipient_bcc
content_filter = smtp-amavis:[127.0.0.1]:10024
policy-spf_time_limit = 3600s
Кто может тыкните где я накосячил? Уже голову сломал куда копать и что это такое?
