[split] Security Problem detected

[joximu]

BeNe Wrote:Can you Post the mail.log please ?

Greez BeNe

Why?

The domain alias makes a dns zone "gmx.net" - this alone is not a good thing.

The new mail account test@gmx.net makes postfix to "think" gmx.net is a local domain, the local dns does confirm this... - the second point which is not good.
The catchall (which you only can create if at least one mail account is created) does the rest...


But I can put the logs here, slightly anonymized :-)

Code:

Aug 17 18:10:07 myhost postfix/smtpd[16223]: connect from myhost.mydomain.ch.local[127.0.0.1]
Aug 17 18:10:07 myhost postfix/smtpd[16223]: 9CC0C138933: client=myhost.mydomain.ch.local[127.0.0.1]
Aug 17 18:10:07 myhost postfix/cleanup[16225]: 9CC0C138933: message-id=<60194.123.45.67.89.1187367007.squirrel@admin.myhost.mydomain.ch>
Aug 17 18:10:07 myhost postfix/qmgr[16178]: 9CC0C138933: from=<joximu@mydomain.ch>, size=1031, nrcpt=1 (queue active)
Aug 17 18:10:07 myhost postfix/smtpd[16223]: disconnect from myhost.mydomain.ch.local[127.0.0.1]
Aug 17 18:10:08 myhost postfix/smtp[16226]: 9CC0C138933: to=<joximu@externalhost.de>, orig_to=<jkdfsjghsdjkghdvdf@gmx.net>, relay=mx.externalhost.de[98.76.54.111]:25, delay=1.1, delays=0.
08/0.03/0.83/0.1, dsn=2.0.0, status=sent (250 OK id=1IM4NX-0006VY-00)
Aug 17 18:10:08 myhost postfix/qmgr[16178]: 9CC0C138933: removed

here, my catchall sends all mails to "joximu@externalhost.de"