1. ¡OFERTA! con cupón "DIRVPS": hosting por $0,01 y también VPS Linux y Windows por $0,01 el primer mes por Interserver ← publi
    Descartar aviso
Descartar aviso
Al usar este sitio web, aceptas que nosotros y nuestros socios podamos establecer cookies para fines tales como personalizar el contenido y la publicidad. Más información.

Email en espera inmenso

Tema en 'Asuntos Técnicos' iniciado por loadingjkr, 4 Ene 2017.

  1. loadingjkr

    loadingjkr Usuario activo

    Después de días de investigación ahora sé por qué mi proveedor me estaba suspendiendo como loco mi VPS
    Esto es la lista de hace 1 semana y así como esto la lista multiplicado por 50 solo esta semana.
    ¿Qué significa este error?
    CODE, HTML o PHP Insertado:
    -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
    9A1C41D2E731 3513 Mon Jan 2 19:23:36 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    93EA51D2E73C 3513 Mon Jan 2 17:53:36 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    9EAA31D2F007 3415 Mon Jan 2 21:53:36 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    9ACA91D2EB9F 3302 Mon Jan 2 03:39:16 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    9760D1D2E6DC 1165 Sun Jan 1 23:40:20 [email protected]
    (connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    961571D2E639 3204 Tue Jan 3 21:43:36 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    9A5931D2E7B1 3204 Tue Jan 3 18:23:36 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    9C2371D2E6D0 1165 Mon Jan 2 11:40:19 [email protected]
    (connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    930D61D2E6E5 3302 Sun Jan 1 23:59:16 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    964DB1D2EA2B 3204 Fri Dec 30 21:39:34 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    989C21D2EE25 3204 Sat Dec 31 11:59:36 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    9C6E41D2EA63 3140 Sat Dec 31 01:19:36 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    90FC61D2EF28 1165 Sat Dec 31 04:00:01 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    9081E1D2EFF0 1379 Sun Jan 1 20:09:20 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    91BA51D2EB17 3513 Sun Jan 1 04:59:16 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    9F79F1D2F067 1165 Tue Jan 3 01:20:01 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    9B5711D2E6FE 1165 Mon Jan 2 04:00:19 [email protected]
    (connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    962B11D2E722 3513 Mon Jan 2 16:53:36 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    960721D2EF94 3302 Sat Dec 31 22:39:16 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    971071D2EBB5 3513 Sun Jan 1 08:59:16 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    989591D2EC09 3415 Wed Jan 4 07:23:36 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    9C3D91D2EF99 1165 Sat Dec 31 21:20:19 [email protected]
    (connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    97F521D2EB3B 1379 Sun Jan 1 07:39:19 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    963C61D2E6A9 3415 Wed Jan 4 12:53:37 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    9B2591D2ED2F 1165 Tue Jan 3 12:20:01 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    90E0B1D2E7B9 1165 Tue Jan 3 18:40:02 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    9D11B1D2E751 3204 Tue Jan 3 04:19:36 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    9CB771D2E991 3204 Wed Jan 4 05:03:36 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    99D501D2ECD7 1165 Mon Jan 2 19:00:19 [email protected]
    (connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    9C1711D2EFF1 1165 Tue Jan 3 07:40:01 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    921C61D2EF84 3228 Sun Jan 1 08:59:16 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    9E7BB1D2EB5B 1165 Sun Jan 1 03:00:19 [email protected]
    (connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    95F261D2EA03 3415 Fri Dec 30 14:29:22 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    98A3B1D2EF4C 1379 Sun Jan 1 16:09:19 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    9418D1D2EB3F 3302 Mon Jan 2 08:19:16 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    9DD451D2DC27 1379 Sun Jan 1 05:39:19 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    964361D2EBBF 1165 Tue Jan 3 05:20:01 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    941461D2E743 1379 Mon Jan 2 16:39:19 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    93FAC1D2F01C 3204 Mon Jan 2 22:39:36 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    952DF1D2ED85 1379 Wed Jan 4 05:39:02 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    90D9A1D2E710 3415 Tue Jan 3 12:23:36 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    90F641D2E660 3302 Sun Jan 1 04:59:16 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    992EE1D2EC71 1379 Mon Jan 2 15:09:20 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    973821D2E798 3204 Wed Jan 4 02:23:36 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    9C1171D2EFCB 3302 Sun Jan 1 02:39:16 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    99A5E1D2EAF5 3351 Sat Dec 31 15:29:36 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    9CB9B1D2EAF3 3302 Sun Jan 1 17:19:16 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    9987F1D2E9E1 3513 Sun Jan 1 09:29:16 MAILER-DAEMON
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    95AD31D2E7C9 3415 Tue Jan 3 21:53:36 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
    9115A1D2E7D7 3415 Wed Jan 4 00:23:36 MAILER-DAEMON
    (connect to msv7.midominio.com[104.28.3.108]:25: Connection timed out)
    [email protected]
    
    9A5791D2EB63 1379 Sun Jan 1 08:09:20 [email protected]
    (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    [email protected]
    
     
  2.  
  3. Datacenter1

    Datacenter1 Usuario activo

    msv7.midominio.com es tu servidor local?

    si es así tu servidor tiene un problema de identidad y no sabe que el es msv7.midominio.com y trara de enrutear el email a 104.28.3.108 que es una dirección de Cloudflare y por supuesto falla

    Yo comenzaría por ver que hay en /etc/hosts (debe haber una entrada que apunte msv7.midominio.com a tu ip local
     
    A loadingjkr le gusta esto.
  4. loadingjkr

    loadingjkr Usuario activo

    msv7.midominio.com coloqué cuando ejecuté el siguiente comando.
    [​IMG]



    Tengo otro VPS con el mismo sv5.otrodominio.com y no me genera el error que este VPS sí
    vi /etc/hosts
    [​IMG]
     
  5. loadingjkr

    loadingjkr Usuario activo

    ¿A qué se deberá el envío masivo de esos correos?
    Actualmente no estoy utilizando el correo pero me da mucha curiosidad saber qué es lo que sucede.

    Esto es lo que encontré en cat /var/log/mail.log
    multiplicado por 1000
    CODE, HTML o PHP Insertado:
    Jan  1 09:33:36 sv5 postfix/qmgr[3897]: 13E231D2E757: from=<>, size=3415, nrcpt=1 (queue active)
    Jan  1 09:33:36 sv5 postfix/error[31575]: D9DAD1D2E767: to=<[email protected]>, relay=none, delay=279285, delays=279285/0.01/0/0, dsn=4.4.3, status=deferred (delivery temporarily suspended: Host or domain name not found. Name service error for name=msv7.midominio.com type=MX: Host not found, try again)
    Jan  1 09:33:36 sv5 postfix/error[31587]: DDA511D2E77E: to=<[email protected]>, relay=none, delay=279285, delays=279285/0.01/0/0, dsn=4.4.3, status=deferred (delivery temporarily suspended: Host or domain name not found. Name service error for name=msv7.midominio.com type=MX: Host not found, try again)
    
    
     
  6. loadingjkr

    loadingjkr Usuario activo

    El día 1 estuve suspendido
    El día 3 volví a tener uptime
    CODE, HTML o PHP Insertado:
    Jan  4 00:00:01 sv5 postfix/pickup[11165]: D63AC1D2EDD1: uid=105 from=<smmsp>
    Jan  4 00:00:01 sv5 postfix/cleanup[15337]: D63AC1D2EDD1: message-id=<[email protected]>
    Jan  4 00:00:01 sv5 postfix/qmgr[3897]: D63AC1D2EDD1: from=<[email protected]>, size=693, nrcpt=1 (queue active)
    Jan  4 00:00:02 sv5 postfix/smtpd[15425]: connect from localhost.localdomain[127.0.0.1]
    Jan  4 00:00:02 sv5 postfix/smtpd[15425]: 3CCC51D2EDBF: client=localhost.localdomain[127.0.0.1]
    Jan  4 00:00:02 sv5 postfix/cleanup[15337]: 3CCC51D2EDBF: message-id=<[email protected]>
    Jan  4 00:00:02 sv5 postfix/qmgr[3897]: 3CCC51D2EDBF: from=<[email protected]>, size=1165, nrcpt=1 (queue active)
    Jan  4 00:00:02 sv5 postfix/error[15310]: 3CCC51D2EDBF: to=<[email protected]>, relay=none, delay=0.16, delays=0.15/0/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to msv7.midominio.com[104.28.2.108]:25: Connection timed out)
    Jan  4 00:00:02 sv5 amavis[14182]: (14182-01) Passed CLEAN {RelayedInternal}, <[email protected]> -> <[email protected]>, Message-ID: <[email protected]>, mail_id: T790zXi90IKO, Hits: -0.001, size: 693, queued_as: 3CCC51D2EDBF, 598 ms
    Jan  4 00:00:02 sv5 postfix/smtp[15391]: D63AC1D2EDD1: to=<[email protected]>, orig_to=<root>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.63, delays=0.01/0.01/0.05/0.55, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 3CCC51D2EDBF)
    Jan  4 00:00:02 sv5 postfix/qmgr[3897]: D63AC1D2EDD1: removed
    
     
  7. loadingjkr

    loadingjkr Usuario activo

    ¿será el intruso?
    Los correos que se envían están asociadas a esta IP
    Me dice que su puerto 3389 está on ya le metí DDOS por listo
    CODE, HTML o PHP Insertado:
    Jan  4 17:14:11 sv5 postfix/smtpd[4808]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan  4 17:24:57 sv5 postfix/smtpd[5278]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan  4 17:35:44 sv5 postfix/smtpd[5802]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan  4 17:46:33 sv5 postfix/smtpd[6316]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan  4 17:57:19 sv5 postfix/smtpd[6819]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan  4 18:08:04 sv5 postfix/smtpd[7350]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan  4 18:18:51 sv5 postfix/smtpd[7819]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan  4 18:29:34 sv5 postfix/smtpd[8321]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan  4 18:40:19 sv5 postfix/smtpd[8901]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan  4 18:50:59 sv5 postfix/smtpd[9328]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan  4 19:01:49 sv5 postfix/smtpd[9860]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan  4 19:12:30 sv5 postfix/smtpd[10362]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan  4 19:23:14 sv5 postfix/smtpd[10862]: warning: unknown[195.22.126.244]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    
     


Alojamiento web, Hosting Reseller, Servidores Dedicados - All in Hosting


    
    
    
    
Blog · Sitios amigos: GuiaHosting · Unidominios · Interalta ·