mail spam help

[gromsp]

(08-16-2012 09:25 PM)joximu Wrote:  Hi

you need to find out how the spam came to your server.

There are several ways...

Here some commands to find more infos...

Code:

mailq

zgrep CCA58108B8BC /var/log/mail*

grep -r prefeiturasfs@uol.com /var/spool/postfix/defer*

I hope you get the idea where to look further...

/J

TNX for your reply.
It get very interesting i got output like this:
/var/log/mail.log.0:Aug 16 01:03:02 server postfix/qmgr[845]: CCA58108B8BC: from=<webmaster@mydomain.com>, size=3817, nrcpt=1 (queue active)
/var/log/mail.log.0:Aug 16 01:03:02 server postfix/qmgr[845]: CCA58108B8BC: to=<prefeiturasfs@uol.com>, relay=none, delay=71896, delays=71896/0/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to uol.com[200.147.3.205]:25: Connection timed out)

webmaster@mydomain.com is not valid email account (do not exist in ISPCP omega)