sendmail log growing due to failed spam attempts

[Einstein47]

I don't know if this question should be in the sendmail forum, or here. And since I don't know much about sendmail, I'll ask here first.

Our sendmail was configured by a "security specialist" consultant who made it "spam proof" - which is another issue entirely. However, now I am seeing in the /var/log/syslog a ton of "Connection refused" messages going to all these yahoo email accounts. So someone is trying to spam us, but they are being blocked.

That is all fine and good. But now I have to handle a syslog that is growing like crazy. Is there a way to better control this, or should I be happy that my log is showing that the spam prevention is working?


Einstein47
(Sometimes you're the windshield... sometimes you're the bug - Unknown)

 

[bvgsy]

I don't think someone is trying to SPAM you. It seems to me that your users are sending out messages to YAHOO but YAHOO is denying emails coming from you.

In other words, you're the SPAMMER.

Please check your configurations to make sure you're not setup to open-relay. There are many bad people out there that takes advantages of open-relay systems and if I'm correct, they're using your systems to send out SPAM messages.

Login to your system and type the following:

netstat -an

If you see addresses that is not part of your network, it's likely that you're being used. And in that case, you're IP address is being blocked.

Go to

http://www.dnsbl.us.sorbs.net/cgi-bin/lookup?IP=

and enter your IP address. If it's listed anywhere then you have lots of work to do.

Good luck!