Это кто блин так балуецца?

wavebourn · **Posted:** Mon Jan 07, 2013 11:23 am

Закоментировал. Результат тот-же -- не прошли те-же 2 теста.

wavebourn · **Posted:** Mon Jan 07, 2013 12:20 pm

Пооже, в случае пустого адреса постфикс считает сообщение отлупом, который он обязан принять, и принимает не смотря на все остальные правила.

Однако яху плевал на этот rfc, и если адресат неизвестен, либо даже обнаружил признаки спама в теле, то отвергает нахрен.

wavebourn · **Posted:** Mon Jan 07, 2013 12:38 pm

Всё, проблема решена.
Пришлось явно прописать relay_domains -- нахрена спрашивается, если указана схема host, что должно по умолчанию запрещать рилеить?

Спасибо за тулзу, Сергей! Очень помогла. И намёк в твоём конфиге, по поводу relay_domains

doldonius · **Posted:** Mon Jan 07, 2013 12:59 pm

wavebourn wrote:

Пришлось явно прописать relay_domains -- нахрена спрашивается, если указана схема host, что должно по умолчанию запрещать рилеить?

Однако, повод для багрепорта.

wavebourn · **Posted:** Mon Jan 07, 2013 3:29 pm

doldonius wrote:

wavebourn wrote:

Пришлось явно прописать relay_domains -- нахрена спрашивается, если указана схема host, что должно по умолчанию запрещать рилеить?

Однако, повод для багрепорта.

Давно пора. На тему: "Все, кто продолжает вестись на шутку Эрика Оллмана 1981 - го года - идиоты" Evil or Very Mad

Я в начале 90-х пытался пропихнуть свой вариант, но дальше Камаза он не пошёл -- гигикающая толпа не поняла. А принципиальная разница была всего-лишь в обязательной авторизации между хостами и человеческим описанием правил в конфиг - файле. При этом сохранялись все варианты адресации, в смешанном виде, которые похерии в угоду самому простому хост@домен.

wavebourn · **Posted:** Mon Jan 07, 2013 8:16 pm

А вот новости про е-бэй: эскюэл инъекция и кросс-сайт скриптинг:

http://threatpost.com/en_us/blogs/ebay- ... les-112612

wavebourn · **Posted:** Thu Jan 10, 2013 4:53 pm

Теперь когда дыра заткнута, могу спокойно собрать статистиу по этой ботсети. Может кому полезно будет. Ботнет лезет с нескольких адресов, с периодом минут в десять, пропихивает сразу на пачку адресов.

Jan 10 15:11:13 www postfix/smtpd[7582]: connect from firstt3.lnk.telstra.net[165.228.246.237]
Jan 10 15:11:14 www postfix/smtpd[7582]: NOQUEUE: reject: RCPT from firstt3.lnk.telstra.net[165.228.246.237]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 15:11:15 www postfix/smtpd[7582]: disconnect from firstt3.lnk.telstra.net[165.228.246.237]
Jan 10 15:14:35 www postfix/anvil[7584]: statistics: max connection rate 1/60s for (smtp:165.228.246.237) at Jan 10 15:11:13
Jan 10 15:14:35 www postfix/anvil[7584]: statistics: max connection count 1 for (smtp:165.228.246.237) at Jan 10 15:11:13
Jan 10 15:14:35 www postfix/anvil[7584]: statistics: max cache size 1 at Jan 10 15:11:13
Jan 10 15:26:30 www postfix/smtpd[7661]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Jan 10 15:26:30 www postfix/smtpd[7661]: connect from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]
Jan 10 15:26:30 www postfix/smtpd[7664]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Jan 10 15:26:31 www postfix/smtpd[7661]: NOQUEUE: reject: RCPT from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 15:26:31 www postfix/smtpd[7661]: disconnect from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]
Jan 10 15:26:31 www postfix/smtpd[7664]: connect from 21.Red-88-8-254.dynamicIP.rima-tde.net[88.8.254.21]
Jan 10 15:26:32 www postfix/smtpd[7664]: NOQUEUE: reject: RCPT from 21.Red-88-8-254.dynamicIP.rima-tde.net[88.8.254.21]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 15:26:32 www postfix/smtpd[7664]: disconnect from 21.Red-88-8-254.dynamicIP.rima-tde.net[88.8.254.21]
Jan 10 15:29:52 www postfix/anvil[7663]: statistics: max connection rate 1/60s for (smtp:75.149.2.246) at Jan 10 15:26:30
Jan 10 15:29:52 www postfix/anvil[7663]: statistics: max connection count 1 for (smtp:75.149.2.246) at Jan 10 15:26:30
Jan 10 15:29:52 www postfix/anvil[7663]: statistics: max cache size 2 at Jan 10 15:26:31
Jan 10 15:34:01 www postfix/smtpd[7692]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Jan 10 15:34:01 www postfix/smtpd[7692]: connect from 74.171.216.87.static.jazztel.es[87.216.171.74]
Jan 10 15:34:02 www postfix/smtpd[7692]: NOQUEUE: reject: RCPT from 74.171.216.87.static.jazztel.es[87.216.171.74]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 15:34:02 www postfix/smtpd[7692]: disconnect from 74.171.216.87.static.jazztel.es[87.216.171.74]
Jan 10 15:37:22 www postfix/anvil[7694]: statistics: max connection rate 1/60s for (smtp:87.216.171.74) at Jan 10 15:34:01
Jan 10 15:37:22 www postfix/anvil[7694]: statistics: max connection count 1 for (smtp:87.216.171.74) at Jan 10 15:34:01
Jan 10 15:37:22 www postfix/anvil[7694]: statistics: max cache size 1 at Jan 10 15:34:01
Jan 10 15:41:34 www postfix/smtpd[7708]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Jan 10 15:41:34 www postfix/smtpd[7708]: warning: hostname 79.161.3.142.static.lyse.net does not resolve to address 79.161.3.142: Name or service not known
Jan 10 15:41:34 www postfix/smtpd[7708]: connect from unknown[79.161.3.142]
Jan 10 15:41:35 www postfix/smtpd[7708]: NOQUEUE: reject: RCPT from unknown[79.161.3.142]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 15:41:35 www postfix/smtpd[7708]: disconnect from unknown[79.161.3.142]
Jan 10 15:44:55 www postfix/anvil[7710]: statistics: max connection rate 1/60s for (smtp:79.161.3.142) at Jan 10 15:41:34
Jan 10 15:44:55 www postfix/anvil[7710]: statistics: max connection count 1 for (smtp:79.161.3.142) at Jan 10 15:41:34
Jan 10 15:44:55 www postfix/anvil[7710]: statistics: max cache size 1 at Jan 10 15:41:34
Jan 10 15:56:27 www postfix/smtpd[7745]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Jan 10 15:56:27 www postfix/smtpd[7745]: connect from c-69-138-44-95.hsd1.tn.comcast.net[69.138.44.95]
Jan 10 15:56:28 www postfix/smtpd[7745]: NOQUEUE: reject: RCPT from c-69-138-44-95.hsd1.tn.comcast.net[69.138.44.95]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 15:56:28 www postfix/smtpd[7745]: disconnect from c-69-138-44-95.hsd1.tn.comcast.net[69.138.44.95]
Jan 10 15:59:48 www postfix/anvil[7747]: statistics: max connection rate 1/60s for (smtp:69.138.44.95) at Jan 10 15:56:27
Jan 10 15:59:48 www postfix/anvil[7747]: statistics: max connection count 1 for (smtp:69.138.44.95) at Jan 10 15:56:27
Jan 10 15:59:48 www postfix/anvil[7747]: statistics: max cache size 1 at Jan 10 15:56:27
Jan 10 16:03:45 www postfix/smtpd[7788]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Jan 10 16:03:45 www postfix/smtpd[7788]: connect from 1207ds2-he.0.fullrate.dk[90.184.114.13]
Jan 10 16:03:46 www postfix/smtpd[7788]: NOQUEUE: reject: RCPT from 1207ds2-he.0.fullrate.dk[90.184.114.13]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 16:03:46 www postfix/smtpd[7788]: disconnect from 1207ds2-he.0.fullrate.dk[90.184.114.13]
Jan 10 16:07:07 www postfix/anvil[7790]: statistics: max connection rate 1/60s for (smtp:90.184.114.13) at Jan 10 16:03:45
Jan 10 16:07:07 www postfix/anvil[7790]: statistics: max connection count 1 for (smtp:90.184.114.13) at Jan 10 16:03:45
Jan 10 16:07:07 www postfix/anvil[7790]: statistics: max cache size 1 at Jan 10 16:03:45
Jan 10 16:11:04 www postfix/smtpd[7811]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Jan 10 16:11:05 www postfix/smtpd[7811]: connect from 21.Red-88-8-254.dynamicIP.rima-tde.net[88.8.254.21]
Jan 10 16:11:05 www postfix/smtpd[7811]: NOQUEUE: reject: RCPT from 21.Red-88-8-254.dynamicIP.rima-tde.net[88.8.254.21]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 16:11:06 www postfix/smtpd[7811]: disconnect from 21.Red-88-8-254.dynamicIP.rima-tde.net[88.8.254.21]
Jan 10 16:11:07 www postfix/smtpd[7811]: connect from adsl-074-164-014-171.sip.mia.bellsouth.net[74.164.14.171]
Jan 10 16:11:29 www postfix/smtpd[7811]: NOQUEUE: reject: RCPT from adsl-074-164-014-171.sip.mia.bellsouth.net[74.164.14.171]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 16:11:29 www postfix/smtpd[7811]: disconnect from adsl-074-164-014-171.sip.mia.bellsouth.net[74.164.14.171]
Jan 10 16:14:49 www postfix/anvil[7813]: statistics: max connection rate 1/60s for (smtp:88.8.254.21) at Jan 10 16:11:05
Jan 10 16:14:49 www postfix/anvil[7813]: statistics: max connection count 1 for (smtp:88.8.254.21) at Jan 10 16:11:05
Jan 10 16:14:49 www postfix/anvil[7813]: statistics: max cache size 2 at Jan 10 16:11:07
Jan 10 16:18:19 www postfix/smtpd[7836]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Jan 10 16:18:19 www postfix/smtpd[7836]: connect from wsip-24-234-155-80.lv.lv.cox.net[24.234.155.80]
Jan 10 16:18:20 www postfix/smtpd[7836]: NOQUEUE: reject: RCPT from wsip-24-234-155-80.lv.lv.cox.net[24.234.155.80]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 16:18:20 www postfix/smtpd[7836]: disconnect from wsip-24-234-155-80.lv.lv.cox.net[24.234.155.80]
Jan 10 16:21:40 www postfix/anvil[7838]: statistics: max connection rate 1/60s for (smtp:24.234.155.80) at Jan 10 16:18:19
Jan 10 16:21:40 www postfix/anvil[7838]: statistics: max connection count 1 for (smtp:24.234.155.80) at Jan 10 16:18:19
Jan 10 16:21:40 www postfix/anvil[7838]: statistics: max cache size 1 at Jan 10 16:18:19
Jan 10 16:25:35 www postfix/smtpd[7851]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Jan 10 16:25:36 www postfix/smtpd[7851]: connect from 21.Red-88-8-254.dynamicIP.rima-tde.net[88.8.254.21]
Jan 10 16:25:36 www postfix/smtpd[7851]: NOQUEUE: reject: RCPT from 21.Red-88-8-254.dynamicIP.rima-tde.net[88.8.254.21]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 16:25:37 www postfix/smtpd[7851]: disconnect from 21.Red-88-8-254.dynamicIP.rima-tde.net[88.8.254.21]
Jan 10 16:28:57 www postfix/anvil[7853]: statistics: max connection rate 1/60s for (smtp:88.8.254.21) at Jan 10 16:25:36
Jan 10 16:28:57 www postfix/anvil[7853]: statistics: max connection count 1 for (smtp:88.8.254.21) at Jan 10 16:25:36
Jan 10 16:28:57 www postfix/anvil[7853]: statistics: max cache size 1 at Jan 10 16:25:36
Jan 10 16:40:40 www postfix/smtpd[7893]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Jan 10 16:40:40 www postfix/smtpd[7893]: connect from 70-90-65-253-BusName-wfl.hfc.comcastbusiness.net[70.90.65.253]
Jan 10 16:40:40 www postfix/smtpd[7893]: NOQUEUE: reject: RCPT from 70-90-65-253-BusName-wfl.hfc.comcastbusiness.net[70.90.65.253]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 16:40:41 www postfix/smtpd[7893]: disconnect from 70-90-65-253-BusName-wfl.hfc.comcastbusiness.net[70.90.65.253]
Jan 10 16:44:01 www postfix/anvil[7895]: statistics: max connection rate 1/60s for (smtp:70.90.65.253) at Jan 10 16:40:40
Jan 10 16:44:01 www postfix/anvil[7895]: statistics: max connection count 1 for (smtp:70.90.65.253) at Jan 10 16:40:40
Jan 10 16:44:01 www postfix/anvil[7895]: statistics: max cache size 1 at Jan 10 16:40:40
Jan 10 16:48:13 www postfix/smtpd[7905]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Jan 10 16:48:13 www postfix/smtpd[7905]: connect from c-69-138-44-95.hsd1.tn.comcast.net[69.138.44.95]
Jan 10 16:48:13 www postfix/smtpd[7905]: NOQUEUE: reject: RCPT from c-69-138-44-95.hsd1.tn.comcast.net[69.138.44.95]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 16:48:14 www postfix/smtpd[7905]: disconnect from c-69-138-44-95.hsd1.tn.comcast.net[69.138.44.95]
Jan 10 16:51:34 www postfix/anvil[7907]: statistics: max connection rate 1/60s for (smtp:69.138.44.95) at Jan 10 16:48:13
Jan 10 16:51:34 www postfix/anvil[7907]: statistics: max connection count 1 for (smtp:69.138.44.95) at Jan 10 16:48:13
Jan 10 16:51:34 www postfix/anvil[7907]: statistics: max cache size 1 at Jan 10 16:48:13
Jan 10 16:55:51 www postfix/smtpd[7921]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Jan 10 16:55:51 www postfix/smtpd[7921]: warning: hostname static-50-34-240-12.evrt.wa.frontiernet.net does not resolve to address 50.34.240.12: Name or service not known
Jan 10 16:55:51 www postfix/smtpd[7921]: connect from unknown[50.34.240.12]
Jan 10 16:55:51 www postfix/smtpd[7921]: NOQUEUE: reject: RCPT from unknown[50.34.240.12]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 16:55:51 www postfix/smtpd[7921]: disconnect from unknown[50.34.240.12]

pomorin · **Posted:** Thu Jan 10, 2013 7:34 pm

Знакомые все домены. В свое время я на гейте их подсетями с маской /16 блокировал...

wavebourn · **Posted:** Thu Jan 10, 2013 10:15 pm

И Комкаст тоже? Smile

Эта хрень крутится на проломленных компьютерах, хозяева которых и не догадываются.

А шарманка между делом продолжает наигрывать...

Jan 10 17:03:24 www postfix/smtpd[7993]: NOQUEUE: reject: RCPT from unknown[24.96.212.163]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 17:17:48 www postfix/smtpd[8022]: NOQUEUE: reject: RCPT from wsip-24-234-155-80.lv.lv.cox.net[24.234.155.80]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 17:25:12 www postfix/smtpd[8069]: NOQUEUE: reject: RCPT from unknown[64.56.122.66]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 17:40:17 www postfix/smtpd[8104]: NOQUEUE: reject: RCPT from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 17:48:11 www postfix/smtpd[8133]: NOQUEUE: reject: RCPT from 21.Red-88-8-254.dynamicIP.rima-tde.net[88.8.254.21]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 17:56:20 www postfix/smtpd[8155]: NOQUEUE: reject: RCPT from unknown[79.161.3.142]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 18:12:06 www postfix/smtpd[8230]: NOQUEUE: reject: RCPT from wsip-24-234-155-80.lv.lv.cox.net[24.234.155.80]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 18:19:41 www postfix/smtpd[8257]: NOQUEUE: reject: RCPT from unknown[64.56.122.66]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 18:34:39 www postfix/smtpd[8283]: NOQUEUE: reject: RCPT from unknown[50.121.152.110]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 18:41:42 www postfix/smtpd[8319]: NOQUEUE: reject: RCPT from 108-64-133-67.lightspeed.dctril.sbcglobal.net[108.64.133.67]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 18:49:05 www postfix/smtpd[8345]: NOQUEUE: reject: RCPT from 50-194-23-90-static.hfc.comcastbusiness.net[50.194.23.90]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 18:56:48 www postfix/smtpd[8368]: NOQUEUE: reject: RCPT from firstt3.lnk.telstra.net[165.228.246.237]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 19:04:11 www postfix/smtpd[8409]: NOQUEUE: reject: RCPT from unknown[74.11.126.243]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 19:11:54 www postfix/smtpd[8430]: NOQUEUE: reject: RCPT from 50-73-168-197-pennsylvania.hfc.comcastbusiness.net[50.73.168.197]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 19:19:27 www postfix/smtpd[8453]: NOQUEUE: reject: RCPT from 21.Red-88-8-254.dynamicIP.rima-tde.net[88.8.254.21]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 19:26:48 www postfix/smtpd[8466]: NOQUEUE: reject: RCPT from adsl-074-164-014-171.sip.mia.bellsouth.net[74.164.14.171]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 19:49:23 www postfix/smtpd[8538]: NOQUEUE: reject: RCPT from firstt3.lnk.telstra.net[165.228.246.237]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 19:56:53 www postfix/smtpd[8573]: NOQUEUE: reject: RCPT from 108-64-133-67.lightspeed.dctril.sbcglobal.net[108.64.133.67]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 20:03:59 www postfix/smtpd[8621]: NOQUEUE: reject: RCPT from 74.171.216.87.static.jazztel.es[87.216.171.74]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 20:11:09 www postfix/smtpd[8656]: NOQUEUE: reject: RCPT from unknown[74.11.126.243]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 20:18:36 www postfix/smtpd[8676]: NOQUEUE: reject: RCPT from 23-25-216-129-static.hfc.comcastbusiness.net[23.25.216.129]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 20:33:14 www postfix/smtpd[8721]: NOQUEUE: reject: RCPT from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 20:40:54 www postfix/smtpd[8752]: NOQUEUE: reject: RCPT from unknown[50.121.152.110]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 20:55:24 www postfix/smtpd[8797]: NOQUEUE: reject: RCPT from unknown[24.96.212.163]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 21:03:12 www postfix/smtpd[8828]: NOQUEUE: reject: RCPT from rrcs-24-106-174-74.se.biz.rr.com[24.106.174.74]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 21:10:27 www postfix/smtpd[8883]: NOQUEUE: reject: RCPT from ihy122.internetdsl.tpnet.pl[79.189.206.122]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>

pomorin · **Posted:** Fri Jan 11, 2013 8:26 am

нец

wavebourn wrote:

И Комкаст тоже? Smile

в первую очередь. Процентов 50 всего говна оттуда прет. Есть комкасовские почтари, остальных - в топку. Особенно частных клиентов, по SMTP вздумавших напрямик почту рассылать. Пусть МХы юзают, на худой конец, если приспичило.
Ща пороюсь по архивам, где - то у меня правила для iptables со своего узла были, килобайтов 10 примерно... Надо? Только не обещаю, что найду - половина сидюков не чиается, недавно такую неприятность обнаружил. Sad

Там даже парсер самописный был, по логам айпишники выделявший и в файл для дальнейшего употребления собирающий все это.
И, кстати, Китай закапывай нафик весь. В свое время он мне тоже копоти давал. Если он до тебя еще не добрался, то это теперь вопрос времени. Хуже Камкэста.

wavebourn · **Posted:** Fri Jan 11, 2013 12:29 pm

Ненадо, спасибо. Фильтровать подсетки - это так можно вообще отключиться и не париться. У меня, кстати, тоже Комкаст провайдер. Он сейчас самый крупный в Штатах.

А ботнет тем временем не унимается... Все адреса, что ты видишь - это проломленные хосты, на которых впендюрены трояны. Они могут быть где угодно, как ты видишь. И адреса как статические, так и динамические. Владельцы могут их отключить, поменять адрес, переустановить систему, почистить от троянов, и так далее, а адреса так и останутся в фильтре. И вот представь себе, что тебе достался динамический адрес, который я зафильтровал. И - жопа-с, не может мой друг Андрей сходить на мой форум...

У меня и так уже пять с половиной килобайт правил фильтрации набралось, пора чистить:

-rw-------. 1 root root 5546 Jan 5 22:51 /etc/sysconfig/iptables

Вот последняя активность этого ботнета:

Jan 10 18:19:41 www postfix/smtpd[8257]: NOQUEUE: reject: RCPT from unknown[64.56.122.66]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 18:34:39 www postfix/smtpd[8283]: NOQUEUE: reject: RCPT from unknown[50.121.152.110]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 18:41:42 www postfix/smtpd[8319]: NOQUEUE: reject: RCPT from 108-64-133-67.lightspeed.dctril.sbcglobal.net[108.64.133.67]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 18:49:05 www postfix/smtpd[8345]: NOQUEUE: reject: RCPT from 50-194-23-90-static.hfc.comcastbusiness.net[50.194.23.90]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 18:56:48 www postfix/smtpd[8368]: NOQUEUE: reject: RCPT from firstt3.lnk.telstra.net[165.228.246.237]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 19:04:11 www postfix/smtpd[8409]: NOQUEUE: reject: RCPT from unknown[74.11.126.243]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 19:11:54 www postfix/smtpd[8430]: NOQUEUE: reject: RCPT from 50-73-168-197-pennsylvania.hfc.comcastbusiness.net[50.73.168.197]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 19:19:27 www postfix/smtpd[8453]: NOQUEUE: reject: RCPT from 21.Red-88-8-254.dynamicIP.rima-tde.net[88.8.254.21]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 19:26:48 www postfix/smtpd[8466]: NOQUEUE: reject: RCPT from adsl-074-164-014-171.sip.mia.bellsouth.net[74.164.14.171]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 19:49:23 www postfix/smtpd[8538]: NOQUEUE: reject: RCPT from firstt3.lnk.telstra.net[165.228.246.237]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 19:56:53 www postfix/smtpd[8573]: NOQUEUE: reject: RCPT from 108-64-133-67.lightspeed.dctril.sbcglobal.net[108.64.133.67]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 20:03:59 www postfix/smtpd[8621]: NOQUEUE: reject: RCPT from 74.171.216.87.static.jazztel.es[87.216.171.74]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 20:11:09 www postfix/smtpd[8656]: NOQUEUE: reject: RCPT from unknown[74.11.126.243]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 20:18:36 www postfix/smtpd[8676]: NOQUEUE: reject: RCPT from 23-25-216-129-static.hfc.comcastbusiness.net[23.25.216.129]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 20:33:14 www postfix/smtpd[8721]: NOQUEUE: reject: RCPT from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 20:40:54 www postfix/smtpd[8752]: NOQUEUE: reject: RCPT from unknown[50.121.152.110]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 20:55:24 www postfix/smtpd[8797]: NOQUEUE: reject: RCPT from unknown[24.96.212.163]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 21:03:12 www postfix/smtpd[8828]: NOQUEUE: reject: RCPT from rrcs-24-106-174-74.se.biz.rr.com[24.106.174.74]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 21:10:27 www postfix/smtpd[8883]: NOQUEUE: reject: RCPT from ihy122.internetdsl.tpnet.pl[79.189.206.122]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 21:18:14 www postfix/smtpd[8916]: NOQUEUE: reject: RCPT from unknown[69.15.133.210]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 21:33:05 www postfix/smtpd[8976]: NOQUEUE: reject: RCPT from unknown[79.161.3.142]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 21:40:15 www postfix/smtpd[8998]: NOQUEUE: reject: RCPT from unknown[64.56.122.66]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 21:47:44 www postfix/smtpd[9019]: NOQUEUE: reject: RCPT from rrcs-24-39-118-70.nyc.biz.rr.com[24.39.118.70]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 21:54:47 www postfix/smtpd[9055]: NOQUEUE: reject: RCPT from unknown[79.161.3.142]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 22:02:13 www postfix/smtpd[9087]: NOQUEUE: reject: RCPT from unknown[24.96.212.163]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 22:17:05 www postfix/smtpd[9179]: NOQUEUE: reject: RCPT from 50-194-23-90-static.hfc.comcastbusiness.net[50.194.23.90]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 22:24:25 www postfix/smtpd[9208]: NOQUEUE: reject: RCPT from unknown[64.56.122.66]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 22:31:42 www postfix/smtpd[9237]: NOQUEUE: reject: RCPT from 50-73-168-197-pennsylvania.hfc.comcastbusiness.net[50.73.168.197]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 22:38:50 www postfix/smtpd[9256]: NOQUEUE: reject: RCPT from adsl-074-164-014-171.sip.mia.bellsouth.net[74.164.14.171]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 22:53:54 www postfix/smtpd[9297]: NOQUEUE: reject: RCPT from rrcs-24-106-174-74.se.biz.rr.com[24.106.174.74]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 23:01:23 www postfix/smtpd[9338]: NOQUEUE: reject: RCPT from 208-53-75-36.static.chico.ca.digitalpath.net[208.53.75.36]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 23:08:28 www postfix/smtpd[9356]: NOQUEUE: reject: RCPT from 74.171.216.87.static.jazztel.es[87.216.171.74]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 23:15:34 www postfix/smtpd[9382]: NOQUEUE: reject: RCPT from unknown[69.15.133.210]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 23:22:48 www postfix/smtpd[9408]: NOQUEUE: reject: RCPT from 23-25-216-129-static.hfc.comcastbusiness.net[23.25.216.129]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 23:22:48 www postfix/smtpd[9409]: NOQUEUE: reject: RCPT from 74.171.216.87.static.jazztel.es[87.216.171.74]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 23:30:04 www postfix/smtpd[9425]: NOQUEUE: reject: RCPT from 1207ds2-he.0.fullrate.dk[90.184.114.13]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 23:37:29 www postfix/smtpd[9448]: NOQUEUE: reject: RCPT from 75-151-109-166-Washington.hfc.comcastbusiness.net[75.151.109.166]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 23:44:45 www postfix/smtpd[9471]: NOQUEUE: reject: RCPT from unknown[64.56.122.66]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 23:51:36 www postfix/smtpd[9490]: NOQUEUE: reject: RCPT from unknown[79.161.3.142]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 10 23:58:21 www postfix/smtpd[9530]: NOQUEUE: reject: RCPT from unknown[64.56.122.66]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 00:05:22 www postfix/smtpd[9564]: NOQUEUE: reject: RCPT from ihy122.internetdsl.tpnet.pl[79.189.206.122]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 00:12:21 www postfix/smtpd[9595]: NOQUEUE: reject: RCPT from 23-25-216-129-static.hfc.comcastbusiness.net[23.25.216.129]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 00:19:19 www postfix/smtpd[9613]: NOQUEUE: reject: RCPT from unknown[74.11.126.243]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 00:40:50 www postfix/smtpd[9661]: NOQUEUE: reject: RCPT from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 00:47:55 www postfix/smtpd[9676]: NOQUEUE: reject: RCPT from 23-25-216-129-static.hfc.comcastbusiness.net[23.25.216.129]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 01:15:50 www postfix/smtpd[9782]: NOQUEUE: reject: RCPT from 50-194-23-90-static.hfc.comcastbusiness.net[50.194.23.90]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 01:23:08 www postfix/smtpd[9813]: NOQUEUE: reject: RCPT from unknown[79.161.3.142]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 01:30:29 www postfix/smtpd[9850]: NOQUEUE: reject: RCPT from unknown[64.56.122.66]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 01:37:46 www postfix/smtpd[9873]: NOQUEUE: reject: RCPT from unknown[69.15.133.210]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 01:59:20 www postfix/smtpd[9928]: NOQUEUE: reject: RCPT from unknown[24.96.212.163]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 02:13:12 www postfix/smtpd[9983]: NOQUEUE: reject: RCPT from unknown[69.15.133.210]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 02:20:09 www postfix/smtpd[10007]: NOQUEUE: reject: RCPT from unknown[89.119.220.57]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 02:26:56 www postfix/smtpd[10024]: NOQUEUE: reject: RCPT from unknown[64.56.122.66]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 02:33:49 www postfix/smtpd[10042]: NOQUEUE: reject: RCPT from static-71-177-221-87.lsanca.fios.verizon.net[71.177.221.87]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 02:40:41 www postfix/smtpd[10062]: NOQUEUE: reject: RCPT from gemass.lnk.telstra.net[120.151.229.160]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 02:54:02 www postfix/smtpd[10094]: NOQUEUE: reject: RCPT from adsl-074-164-014-171.sip.mia.bellsouth.net[74.164.14.171]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 03:07:22 www postfix/smtpd[10156]: NOQUEUE: reject: RCPT from adsl-074-164-014-171.sip.mia.bellsouth.net[74.164.14.171]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 03:14:15 www postfix/smtpd[10186]: NOQUEUE: reject: RCPT from unknown[50.121.152.110]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 03:20:44 www postfix/smtpd[10205]: NOQUEUE: reject: RCPT from unknown[69.15.133.210]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 03:27:22 www postfix/smtpd[10246]: NOQUEUE: reject: RCPT from 74.171.216.87.static.jazztel.es[87.216.171.74]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 03:33:49 www postfix/smtpd[10526]: NOQUEUE: reject: RCPT from ihy122.internetdsl.tpnet.pl[79.189.206.122]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 03:40:07 www postfix/smtpd[10553]: NOQUEUE: reject: RCPT from c-69-138-44-95.hsd1.tn.comcast.net[69.138.44.95]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 03:46:34 www postfix/smtpd[10572]: NOQUEUE: reject: RCPT from 50-194-23-90-static.hfc.comcastbusiness.net[50.194.23.90]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 03:59:26 www postfix/smtpd[10625]: NOQUEUE: reject: RCPT from HSI-KBW-46-223-240-243.hsi.kabel-badenwuerttemberg.de[46.223.240.243]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 04:12:26 www postfix/smtpd[10684]: NOQUEUE: reject: RCPT from 50-194-23-90-static.hfc.comcastbusiness.net[50.194.23.90]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 04:26:03 www postfix/smtpd[10732]: NOQUEUE: reject: RCPT from unknown[79.161.3.142]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 04:32:58 www postfix/smtpd[10757]: NOQUEUE: reject: RCPT from unknown[89.119.220.57]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 04:40:02 www postfix/smtpd[10789]: NOQUEUE: reject: RCPT from ihy122.internetdsl.tpnet.pl[79.189.206.122]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 04:46:56 www postfix/smtpd[10817]: NOQUEUE: reject: RCPT from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 05:06:57 www postfix/smtpd[10899]: NOQUEUE: reject: RCPT from 208-53-75-36.static.chico.ca.digitalpath.net[208.53.75.36]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 05:13:26 www postfix/smtpd[10922]: NOQUEUE: reject: RCPT from 50-194-23-90-static.hfc.comcastbusiness.net[50.194.23.90]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 05:19:44 www postfix/smtpd[10960]: NOQUEUE: reject: RCPT from static-71-177-221-87.lsanca.fios.verizon.net[71.177.221.87]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 05:26:06 www postfix/smtpd[10981]: NOQUEUE: reject: RCPT from 93-63-6-214.ip25.fastwebnet.it[93.63.6.214]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 05:45:26 www postfix/smtpd[11049]: NOQUEUE: reject: RCPT from ihy122.internetdsl.tpnet.pl[79.189.206.122]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 06:05:57 www postfix/smtpd[11135]: NOQUEUE: reject: RCPT from unknown[64.56.122.66]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 06:26:59 www postfix/smtpd[11222]: NOQUEUE: reject: RCPT from unknown[50.121.152.110]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 06:40:53 www postfix/smtpd[11305]: NOQUEUE: reject: RCPT from firstt3.lnk.telstra.net[165.228.246.237]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 06:47:54 www postfix/smtpd[11326]: NOQUEUE: reject: RCPT from 70-90-65-253-BusName-wfl.hfc.comcastbusiness.net[70.90.65.253]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 06:54:42 www postfix/smtpd[11365]: NOQUEUE: reject: RCPT from wsip-24-234-155-80.lv.lv.cox.net[24.234.155.80]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 07:01:19 www postfix/smtpd[11409]: NOQUEUE: reject: RCPT from 50-73-168-197-pennsylvania.hfc.comcastbusiness.net[50.73.168.197]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 07:01:20 www postfix/smtpd[11412]: NOQUEUE: reject: RCPT from firstt3.lnk.telstra.net[165.228.246.237]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 07:14:09 www postfix/smtpd[11462]: NOQUEUE: reject: RCPT from 50-73-168-197-pennsylvania.hfc.comcastbusiness.net[50.73.168.197]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 07:21:04 www postfix/smtpd[11496]: NOQUEUE: reject: RCPT from 23-25-216-129-static.hfc.comcastbusiness.net[23.25.216.129]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 07:27:59 www postfix/smtpd[11521]: NOQUEUE: reject: RCPT from unknown[74.11.126.243]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 07:34:42 www postfix/smtpd[11568]: NOQUEUE: reject: RCPT from ihy122.internetdsl.tpnet.pl[79.189.206.122]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 07:49:18 www postfix/smtpd[11610]: NOQUEUE: reject: RCPT from unknown[50.121.152.110]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 07:55:57 www postfix/smtpd[11648]: NOQUEUE: reject: RCPT from ihy122.internetdsl.tpnet.pl[79.189.206.122]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 08:09:37 www postfix/smtpd[11679]: NOQUEUE: reject: RCPT from unknown[89.119.220.57]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 08:16:12 www postfix/smtpd[11689]: NOQUEUE: reject: RCPT from c-69-138-44-95.hsd1.tn.comcast.net[69.138.44.95]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 08:23:08 www postfix/smtpd[11706]: NOQUEUE: reject: RCPT from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 08:37:24 www postfix/smtpd[11735]: NOQUEUE: reject: RCPT from unknown[50.121.152.110]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 08:44:17 www postfix/smtpd[11765]: NOQUEUE: reject: RCPT from 50-73-168-197-pennsylvania.hfc.comcastbusiness.net[50.73.168.197]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 08:51:19 www postfix/smtpd[11796]: NOQUEUE: reject: RCPT from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 08:58:28 www postfix/smtpd[11809]: NOQUEUE: reject: RCPT from unknown[74.11.126.243]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 09:06:01 www postfix/smtpd[11853]: NOQUEUE: reject: RCPT from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 09:12:52 www postfix/smtpd[11873]: NOQUEUE: reject: RCPT from unknown[69.15.133.210]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 09:19:44 www postfix/smtpd[11887]: NOQUEUE: reject: RCPT from wsip-24-234-155-80.lv.lv.cox.net[24.234.155.80]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 09:40:41 www postfix/smtpd[11942]: NOQUEUE: reject: RCPT from 70-90-65-253-BusName-wfl.hfc.comcastbusiness.net[70.90.65.253]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 09:47:31 www postfix/smtpd[11956]: NOQUEUE: reject: RCPT from 70-90-65-253-BusName-wfl.hfc.comcastbusiness.net[70.90.65.253]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 10:00:45 www postfix/smtpd[12008]: NOQUEUE: reject: RCPT from unknown[74.11.126.243]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 10:15:11 www postfix/smtpd[12059]: NOQUEUE: reject: RCPT from unknown[74.11.126.243]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 10:35:42 www postfix/smtpd[12106]: NOQUEUE: reject: RCPT from 23-25-216-129-static.hfc.comcastbusiness.net[23.25.216.129]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 10:42:34 www postfix/smtpd[12123]: NOQUEUE: reject: RCPT from unknown[74.11.126.243]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 10:49:24 www postfix/smtpd[12131]: NOQUEUE: reject: RCPT from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 10:56:14 www postfix/smtpd[12152]: NOQUEUE: reject: RCPT from c-69-138-44-95.hsd1.tn.comcast.net[69.138.44.95]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 11:03:11 www postfix/smtpd[12176]: NOQUEUE: reject: RCPT from unknown[64.56.122.66]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 11:10:13 www postfix/smtpd[12212]: NOQUEUE: reject: RCPT from 93-63-6-214.ip25.fastwebnet.it[93.63.6.214]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay

wavebourn · **Posted:** Fri Jan 11, 2013 3:05 pm

Jan 11 11:31:27 www postfix/smtpd[12276]: NOQUEUE: reject: RCPT from ihy122.internetdsl.tpnet.pl[79.189.206.122]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 11:38:29 www postfix/smtpd[12292]: NOQUEUE: reject: RCPT from 50-194-23-90-static.hfc.comcastbusiness.net[50.194.23.90]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 11:46:02 www postfix/smtpd[12309]: NOQUEUE: reject: RCPT from static-71-177-221-87.lsanca.fios.verizon.net[71.177.221.87]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 12:00:01 www postfix/smtpd[12344]: NOQUEUE: reject: RCPT from unknown[69.15.133.210]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 12:14:00 www postfix/smtpd[12386]: NOQUEUE: reject: RCPT from unknown[69.15.133.210]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 12:27:40 www postfix/smtpd[12425]: NOQUEUE: reject: RCPT from 75-149-2-246-Pennsylvania.hfc.comcastbusiness.net[75.149.2.246]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 12:34:50 www postfix/smtpd[12442]: NOQUEUE: reject: RCPT from 208-53-75-36.static.chico.ca.digitalpath.net[208.53.75.36]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 12:49:14 www postfix/smtpd[12478]: NOQUEUE: reject: RCPT from ihy122.internetdsl.tpnet.pl[79.189.206.122]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 13:10:29 www postfix/smtpd[12537]: NOQUEUE: reject: RCPT from 93-63-6-214.ip25.fastwebnet.it[93.63.6.214]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 13:17:29 www postfix/smtpd[12552]: NOQUEUE: reject: RCPT from 50-194-23-90-static.hfc.comcastbusiness.net[50.194.23.90]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 13:24:18 www postfix/smtpd[12564]: NOQUEUE: reject: RCPT from 50-73-168-197-pennsylvania.hfc.comcastbusiness.net[50.73.168.197]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 13:31:02 www postfix/smtpd[12589]: NOQUEUE: reject: RCPT from 208-53-75-36.static.chico.ca.digitalpath.net[208.53.75.36]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 13:37:39 www postfix/smtpd[12612]: NOQUEUE: reject: RCPT from 50-73-168-197-pennsylvania.hfc.comcastbusiness.net[50.73.168.197]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>
Jan 11 13:57:32 www postfix/smtpd[12651]: NOQUEUE: reject: RCPT from unknown[79.161.3.142]: 554 5.7.1 <therichsheickc@yahoo.com>: Relay access denied; from=<test@live.com> to=<therichsheickc@yahoo.com> proto=ESMTP helo=<[192.168.2.33]>

wavebourn · **Posted:** Fri Jan 11, 2013 3:06 pm

Может пора написать скрипт, который будет пополнять страничку адресов, захваченных ботнетом? Smile

pomorin · **Posted:** Sat Jan 12, 2013 6:18 am

wavebourn wrote:

И вот представь себе, что тебе достался динамический адрес, который я зафильтровал. И - жопа-с, не может мой друг Андрей сходить на мой форум...

для захода на форум 25 порт не нужен. А всего портов 65 тысяч с хвостиком. А нужно прикрыть только один. Понимаешь?

Quote:

У меня и так уже пять с половиной килобайт правил фильтрации набралось, пора чистить:

-rw-------. 1 root root 5546 Jan 5 22:51 /etc/sysconfig/iptables

Для этого и существуют маски подсетей. Процу пофик, по маске режектить или по одному хосту. Механизм один и тот же.
Это еще я у тебя t-dialin.net что - то не наблюдаю. То ли придавили его, то ли просто еще про тебя не разнюхал. Там инфа про дырявые почтари разлетается быстрее скорости звука. Всем кагалом накидываются на новый релей.

wavebourn · **Posted:** Sat Jan 12, 2013 1:11 pm

У меня у самого, например, есть адрес на комкастбизнес, но я им не пользуюсь. А другие фирмы, вполне легитимные -- могут. Подсетка wavebourn.com принадлежит комкасту. Я только в прошлом году сподобился напрячь их, чтобы поправили реверсную зону -- и то потому, что у майл дот ру был запрет на домен комкастбизнеса, остальные все принимали исправно. А если бы они ещё и по адресам фильтровали, то я бы не мог вообще их абонентам посылать почту. Многие у меня в рассылке по поводу домашних концертов имеют почту на мэйл дот ру. Хорошо, что на твоём севрере не имеют. Smile

Не, я в таких полицейских акциях не участвую Smile

А если уж и париться, - то только так:

pomorin wrote:

Это еще я у тебя t-dialin.net что - то не наблюдаю. То ли придавили его, то ли просто еще про тебя не разнюхал. Там инфа про дырявые почтари разлетается быстрее скорости звука. Всем кагалом накидываются на новый релей.

Да небыло у меня дырявого рилея. Была бага в постфиксе, которую обнаружили и заюзали писатели ботнета. Обнаружат что ещё - будем париться, а прикрываться тазиком от всего мира, на всякий случай - ну нафик, проще уж тогда вообще компьютер из розетки выкинуть. Smile

Вот у ибэя, я выше ссылку кидал, какие дыры обнаружили, для крос-сайт скриптинга и эскюэл-инъекции -- любо-дорого! Только не успели хакеры такой халявой воспользоваться. А то - бы наивными фразами про роботс файл не отбрехались, засудили - бы на полную катушку.

www.wavebourn.com

Это кто блин так балуецца?

Who is online