What kind of spam is this?

[BrettLefty]

Apr 29 12:08:52 Sunshine qmail: 1177873732.111429 new msg 7111434
Apr 29 12:08:52 Sunshine qmail: 1177873732.111528 info msg 7111434: bytes 988 from <Listadr@apothecaryjeri.com> qp 13831 uid 2020
Apr 29 12:08:52 Sunshine qmail: 1177873732.118021 starting delivery 167: msg 7111434 to local 3-infor@liftchair.com
Apr 29 12:08:52 Sunshine qmail: 1177873732.118062 status: local 1/10 remote 0/20
Apr 29 12:08:52 Sunshine qmail: 1177873732.181031 delivery 167: failure: This_address_no_longer_accepts_mail./
Apr 29 12:08:52 Sunshine qmail: 1177873732.181098 status: local 0/10 remote 0/20
Apr 29 12:08:52 Sunshine qmail: 1177873732.187171 bounce msg 7111434 qp 13835
Apr 29 12:08:52 Sunshine qmail: 1177873732.187219 end msg 7111434
Apr 29 12:08:52 Sunshine qmail: 1177873732.190022 new msg 7111436
Apr 29 12:08:52 Sunshine qmail: 1177873732.190071 info msg 7111436: bytes 1575 from <> qp 13835 uid 2522
Apr 29 12:08:52 Sunshine qmail: 1177873732.195025 starting delivery 168: msg 7111436 to remote Listadr@apothecaryjeri.com
Apr 29 12:08:52 Sunshine qmail: 1177873732.195069 status: local 0/10 remote 1/20
Apr 29 12:08:52 Sunshine qmail: 1177873732.304845 delivery 168: success: 64.202.189.86_accepted_message./Remote_host_said:_250_Accepted_message_qp_32193_bytes_1760/
Apr 29 12:08:52 Sunshine qmail: 1177873732.305086 status: local 0/10 remote 0/20
Apr 29 12:08:52 Sunshine qmail: 1177873732.305212 end msg 7111436
Apr 29 12:15:08 Sunshine qmail: 1177874108.270144 new msg 7111434
Apr 29 12:15:08 Sunshine qmail: 1177874108.270378 info msg 7111434: bytes 343 from <sales@besthangouts.com> qp 18027 uid 2020
Apr 29 12:15:08 Sunshine qmail: 1177874108.274957 starting delivery 169: msg 7111434 to local 48-sales@besthangouts.com
Apr 29 12:15:08 Sunshine qmail: 1177874108.274992 status: local 1/10 remote 0/20
Apr 29 12:15:08 Sunshine qmail: 1177874108.343192 new msg 7111436
Apr 29 12:15:08 Sunshine qmail: 1177874108.343250 info msg 7111436: bytes 454 from <sales@besthangouts.com> qp 18033 uid 110
Apr 29 12:15:08 Sunshine qmail: 1177874108.347806 starting delivery 170: msg 7111436 to remote BrettLefty@gmail.com
Apr 29 12:15:08 Sunshine qmail: 1177874108.347852 status: local 1/10 remote 1/20
Apr 29 12:15:08 Sunshine qmail: 1177874108.347885 delivery 169: success: did_0+1+0/qp_18033/
Apr 29 12:15:08 Sunshine qmail: 1177874108.347916 status: local 0/10 remote 1/20
Apr 29 12:15:08 Sunshine qmail: 1177874108.347945 end msg 7111434
Apr 29 12:15:08 Sunshine qmail: 1177874108.435881 delivery 170: failure: 64.202.189.86_failed_after_I_sent_the_message./Remote_host_said:_554_Message_refused./
Apr 29 12:15:08 Sunshine qmail: 1177874108.436796 status: local 0/10 remote 0/20
Apr 29 12:15:08 Sunshine qmail: 1177874108.453660 bounce msg 7111436 qp 18037
Apr 29 12:15:08 Sunshine qmail: 1177874108.453725 end msg 7111436
Apr 29 12:15:08 Sunshine qmail: 1177874108.460315 new msg 7111434
Apr 29 12:15:08 Sunshine qmail: 1177874108.460374 info msg 7111434: bytes 1083 from <> qp 18037 uid 2522
Apr 29 12:15:08 Sunshine qmail: 1177874108.465878 starting delivery 171: msg 7111434 to local 48-sales@besthangouts.com
Apr 29 12:15:08 Sunshine qmail: 1177874108.465931 status: local 1/10 remote 0/20
Apr 29 12:15:08 Sunshine qmail: 1177874108.477246 new msg 7111436
Apr 29 12:15:08 Sunshine qmail: 1177874108.477306 info msg 7111436: bytes 1194 from <> qp 18039 uid 110
Apr 29 12:15:08 Sunshine qmail: 1177874108.481788 starting delivery 172: msg 7111436 to remote BrettLefty@gmail.com
Apr 29 12:15:08 Sunshine qmail: 1177874108.481844 status: local 1/10 remote 1/20
Apr 29 12:15:08 Sunshine qmail: 1177874108.481872 delivery 171: success: did_0+1+0/qp_18039/
Apr 29 12:15:08 Sunshine qmail: 1177874108.481899 status: local 0/10 remote 1/20
Apr 29 12:15:08 Sunshine qmail: 1177874108.481930 end msg 7111434



To me, it looks like someone is using my server to send spam mail. You will see some messages getting sent to BrettLefty@gmail.com This is my server telling me the mail was rejected.



What can i do to stop my server from being used to send spam? Any help is greatly appreciated!

 

[thedaver]

Do you have values in the /var/qmail/control/rcpthosts file?

D.E.R. Management - IT Project Management Consulting

http://www.dermanagement.com/