Тест relay-test.mail-abuse.org прошел успешно:
Tested host banner: 220 mail1.e-arenda.com ESMTP Exim 4.69 Mon, 22 Nov 2010 11:54:25 +0200
System appeared to reject relay attempts
Сервер работает уже несколько лет, никаких проблем не было, а за эту ночь разослали тонну спама, потушил ексим, как только запускаю - опять ломяться и спамят, при чем с разных айпи.
Помогите пожалуйста разобраться, где дыра.
Вот конфиг:
Код: Выделить всё
primary_hostname = mail1.e-arenda.com
message_size_limit = 50M
domainlist local_domains = lsearch;/usr/local/etc/exim/virtual/domains
domainlist relay_domains = lsearch;/usr/local/etc/exim/virtual/domains : localhost
domainlist relay_to_domains = lsearch;/usr/local/etc/exim/virtual/domains : localhost
hostlist relay_from_hosts = localhost:127.0.0.0/8:xxx.xxx.xxx.xxx
domainlist relay_without_scan = domain.com.ua
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data
acl_not_smtp = acl_check_not_smtp
exim_user = mailnull
exim_group = mail
never_users = root
host_lookup = *
rfc1413_hosts = *
rfc1413_query_timeout = 5s
ignore_bounce_errors_after = 1d
timeout_frozen_after = 2d
begin acl
acl_check_rcpt:
accept hosts = :
accept domains = +relay_without_scan
deny hosts = 111.67.202.0/24
deny message = Restricted characters in address
domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|]
deny message = Restricted characters in address
domains = !+local_domains
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
accept local_parts = postmaster
domains = +local_domains
require verify = sender
accept hosts = +relay_from_hosts
control = submission
accept authenticated = *
control = submission
require message = relay not permitted
domains = +local_domains : +relay_to_domains
require verify = recipient
deny dnslists = zen.spamhaus.org:bl.spamcop.net:cbl.abuseat.org:dnsbl.sorbs.net:b.barracudacentral.org
add_header = X-blacklisted-at: $sender_host_address is in a black list at $dnslist_domain
log_message = found in $dnslist_domain
accept
acl_check_data:
accept
acl_check_not_smtp:
defer ratelimit = 10 / 1m / strict / $h_X-orig-ip
log_message = Sender rate $sender_rate / $sender_rate_period $h_X-orig-ip
message = Server busy. Please, try again later.
accept
begin routers
dnslookup:
driver = dnslookup
domains = ! +local_domains
transport = remote_smtp
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
no_more
system_aliases:
driver = redirect
allow_fail
allow_defer
data = ${lookup{$local_part}lsearch{/etc/aliases}}
user = mailnull
group = mail
file_transport = address_file
pipe_transport = address_pipe
userforward:
driver = redirect
check_local_user
file = $home/.forward
no_verify
no_expn
check_ancestor
file_transport = address_file
pipe_transport = address_pipe
reply_transport = address_reply
condition = ${if exists{$home/.forward} {yes} {no} }
virtual_aliases:
driver = redirect
allow_defer
allow_fail
data = ${if exists{/usr/local/etc/exim/virtual/$domain/aliases}{${lookup{$local_part}lsearch*{/usr/local/etc/exim/virtual/$domain/aliases}}}}
virtual_user:
driver = accept
condition = ${if eq {}{${if exists{/usr/local/etc/exim/virtual/${domain}/passwd}{${lookup{$local_part}lsearch{/usr/local/etc/exim/virtual/${domain}/passwd}}}}}{no}{yes}}
domains = lsearch;/usr/local/etc/exim/virtual/domains
group = mail
retry_use_local_part
transport = virtual_localdelivery
localuser:
driver = accept
check_local_user
transport = local_delivery
cannot_route_message = Unknown user
begin transports
remote_smtp:
driver = smtp
virtual_localdelivery:
driver = appendfile
create_directory
delivery_date_add
directory_mode = 770
envelope_to_add
directory = ${extract{5}{:}{${lookup{$local_part}lsearch{/usr/local/etc/exim/virtual/${domain}/passwd}}}}/${local_part}/Maildir
maildir_format
group = mail
mode = 660
return_path_add
user = mailvirtual
quota = ${if exists{/usr/local/etc/exim/virtual/${domain}/quota}{${lookup{$local_part}lsearch*{/usr/local/etc/exim/virtual/${domain}/quota}{$value}{0}}}{0}}
local_delivery:
driver = appendfile
file = /var/mail/$local_part
delivery_date_add
envelope_to_add
return_path_add
group = mail
user = $local_part
mode = 0660
no_mode_fail_narrower
address_pipe:
driver = pipe
return_output
address_file:
driver = appendfile
delivery_date_add
envelope_to_add
return_path_add
address_reply:
driver = autoreply
begin retry
* * F,2h,15m; G,16h,1h,1.5; F,4d,6h
begin rewrite
begin authenticators
fixed_cram:
driver = cram_md5
public_name = CRAM-MD5
server_secret = ${extract{1}{:}{${lookup{$auth1}lsearch{/usr/local/etc/exim/virtual/mydomain.com/passwd}{$value}}}}
server_set_id = $auth1Код: Выделить всё
Return-path: <inna@mail1.e-arenda.com>
Received: from [220.232.177.162] (helo=hgxoal.com)
by mail1.e-arenda.com with esmtpa (Exim 4.69 (FreeBSD))
(envelope-from <inna@mail1.e-arenda.com>)
id 1PKSaW-000BX7-0U; Mon, 22 Nov 2010 11:21:28 +0200
Message-ID: <761fa4c550214e92ac9150f9b77b2fc9@e00dcc32f5844184b78c63fe630ccc74>
Date: Mon, 22 Nov 2010 09:20:58 GMT
Mime-Version: 1.0
X-mailer: Microsoft Outlook Express 6.00.3790.4156
X-Priority: 3
From: =?utf-8?B?IOe+juWls+i2heato+m7nuS4jeeci+W+jOaClOS4ieS4liBld3NibGI=?= <ubfsnna@mail1.e-arenda.com>
To: aaa935435183@yahoo.com.tw
Subject: =?BIG5?B?pn67tKq6wPvF6a91xf2kSLdRv8vAfLzGtWY/P3l5a2dodg==?=
X-MSMail-Priority: Highest
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Content-Type: text/html;
charset="BIG5"
Content-Transfer-Encoding: base64
Sender: inna@mail1.e-arenda.comБуду благодарен за любые комментарии.
