Spam Mails

[stefan-becker]

Hallo,

ich finde in der Queue ganze viele Mails von diesem Typ:

X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
X-No-Auth: unauthenticated sender
Received: from stefanshome.com (localhost.localdomain [127.0.0.1])
	by stefanshome.com (Postfix) with ESMTP id 2A6763A100B;
	Wed, 17 Mar 2010 09:00:47 +0100 (CET)
Received: from User (pxxxxxx.dip0.t-ipconnect.de [xxx.xxx.xxx])
	by stefanshome.com (Postfix) with ESMTP;
	Wed, 17 Mar 2010 09:00:46 +0100 (CET)
From: "HBNET"<agenzi@bpb.it>
Subject: Nuovo documento di rendicontazione e a sua disposizione.
Date: Wed, 17 Mar 2010 09:01:31 +0100
MIME-Version: 1.0
Content-Type: text/html;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20100317080047.2A6763A100B@stefanshome.com>
To: undisclosed-recipients:;

Wenn ich nun im Maillog nach der IP Adresse suche finde diese:

Mar 17 08:28:14 stefanshome postfix/smtpd[12995]: NOQUEUE: client=pxxxxxxx.dip0.t-ipconnect.de[xxx.xxx.xxx.xxx], sasl_method=LOGIN, sasl_username=test

Woher finde ich jetzt den Benutzer raus? Oder was kann das ganze sein?
Stefan

 

[JanJ]

Da versucht jemand sich auf den SMTP mit dem Benutzernamen test zu verbinden um dann eine Mail zu schicken. Der Benutzername existiert nicht bzw. das Passwort ist falsch und er wird zurückgewiesen.

 

[stefan-becker]

Wo steht denn, dass er zurückgewiesen wird?

Müsste dann nicht soetwas kommen?

 SASL LOGIN authentication failed: authentication failure