Spamovani z yahoo.co.kr

[Jafra]

Pekny nedelni podvecer ...

v poslednich par dnech mi zacli docela brutalne spamovat masinknu nejaci
korejci ...
za den cca 30.000 pokusu o poslani mailu .. a o rotaci logu radsi ani
nemluvim, snazil jsem je zakazat ve FW, ale docela meni ip adresy a podle
ripe nejsou vubec vedeni, tudiz rozsah se zablokovat jednoduse neda ...
Mail, jez jsem jim poslal je v priloze vcetne casti logu.
Nesetkal se s tim nahodou nekdo, pripadne nejaky navrh reseni, pls?

Diky
--
Jafra
------------- další část ---------------
Good day,

I write you this mail, because yeour servers try mail spamming for other servers. There is small part of log:

Jun 27 19:16:55 mailserver postfix/smtp[3363]: 2A52D1941AF: to=<mcguire78 na yahoo.co.kr>, relay=mx2.mail.yahoo.co.kr[202.43.207.70], delay=89979, status=deferred (host mx2.mail.yahoo.co.kr[202.43.207.70] said: 421 VS5-MF Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.4.5) (in reply to MAIL FROM command))
Jun 27 19:16:56 mailserver postfix/smtp[3393]: 399E4194038: to=<lim1202 na yahoo.co.kr>, relay=mx2.mail.yahoo.co.kr[202.43.207.75], delay=91140, status=deferred (host mx2.mail.yahoo.co.kr[202.43.207.75] said: 421 VS5-MF Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.4.5) (in reply to MAIL FROM command))
Jun 27 19:16:56 mailserver postfix/smtp[3377]: 39DA81941D5: to=<lsh2014 na yahoo.co.kr>, relay=mx1.mail.yahoo.co.kr[202.43.207.73], delay=90564, status=deferred (lost connection with mx1.mail.yahoo.co.kr[202.43.207.73] while sending RCPT TO)

Jun 27 19:17:11 mailserver postfix/smtp[3405]: B99B01941A9: to=<leesengwoo na yahoo.co.kr>, relay=mx2.mail.yahoo.co.kr[202.43.207.65], delay=91394, status=deferred (lost connection with mx2.mail.yahoo.co.kr[202.43.207.65] while sending RCPT TO)
Jun 27 19:17:11 mailserver postfix/smtp[3405]: B99B01941A9: to=<leesenho na yahoo.co.kr>, relay=mx2.mail.yahoo.co.kr[202.43.207.65], delay=91394, status=deferred (lost connection with mx2.mail.yahoo.co.kr[202.43.207.65] while sending RCPT TO)
Jun 27 19:17:11 mailserver postfix/smtp[3405]: B99B01941A9: to=<leesenlee na yahoo.co.kr>, relay=mx2.mail.yahoo.co.kr[202.43.207.65], delay=91394, status=deferred (lost connection with mx2.mail.yahoo.co.kr[202.43.207.65] while sending RCPT TO) 

Jun 27 19:18:18 mailserver postfix/smtp[3457]: 1D6381941B5: to=<lgaq na yahoo.co.kr>, relay=mx1.mail.yahoo.co.kr[202.43.207.76], delay=91356, status=deferred (lost connection with mx1.mail.yahoo.co.kr[202.43.207.76] while sending RCPT TO)
Jun 27 19:18:18 mailserver postfix/smtp[3457]: 1D6381941B5: to=<lgarcia na yahoo.co.kr>, relay=mx1.mail.yahoo.co.kr[202.43.207.76], delay=91356, status=deferred (lost connection with mx1.mail.yahoo.co.kr[202.43.207.76] while sending RCPT TO)
Jun 27 19:18:18 mailserver postfix/smtp[3457]: 1D6381941B5: to=<lgart na yahoo.co.kr>, relay=mx1.mail.yahoo.co.kr[202.43.207.76], delay=91356, status=deferred (lost connection with mx1.mail.yahoo.co.kr[202.43.207.76] while sending RCPT TO)
Jun 27 19:18:18 mailserver postfix/smtp[3457]: 1D6381941B5: to=<lgaruchung na yahoo.co.kr>, relay=mx1.mail.yahoo.co.kr[202.43.207.76], delay=91356, status=deferred (lost connection with mx1.mail.yahoo.co.kr[202.43.207.76] while sending RCPT TO)
Jun 27 19:18:18 mailserver postfix/smtp[3424]: 1268A194264: to=<moon5369 na yahoo.co.kr>, relay=mx2.mail.yahoo.co.kr[202.43.207.75], delay=88640, status=deferred (lost connection with mx2.mail.yahoo.co.kr[202.43.207.75] while sending RCPT TO) 

Log at server rotate about 2MB in 2 hours! Stop this spamming now or that will be very, very bad for you.


Bye
Jan Franc