Hi,
I think that my postfix installation has been hacked. My df -h shows that rootfs is used in 100%:
and I am constantly receiving emails like this:Code:rootfs 9,2G 8,7G 39M 100% /
Email title: Postfix SMTP server: errors from 118-168-105-197.dynamic.hinet.net[118.168.105.197]
(domain name and IP are fake in above example, except title).Code:Out: 220 mydomain.example.pl ESMTP Postfix (Debian/GNU) In: HELO 41.22.209.91 Out: 250 mydomain.example.pl In: MAIL FROM: <tbdzcpiqpktsze@yahoo.com> Out: 250 2.1.0 Ok In: RCPT TO: <larry55662000@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <kang168168@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <juice2267@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <owenfrp@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <malinyi@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <jijd@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <k0918933@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <hurenling@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <kenchloe@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <joanna2890@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <mage0329@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <lee480506@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <ready0114@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <jmmr@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <orrira@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <mau_maukuo@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <onlykinki0410@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <k8a0r1r5y@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <k123363@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <ken112717@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <lingpiecesjj@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <lcabc1@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <lechiche@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <nslx@yahoo.com.tw> Out: 250 2.1.5 Ok In: RCPT TO: <no92@yahoo.com.tw> Out: 250 2.1.5 Ok In: DATA Out: 354 End data with <CR><LF>.<CR><LF> Out: 250 2.0.0 Ok: queued as 7897350311 In: RSET Out: 250 2.0.0 Ok In: MAIL FROM: <zcwctmwuey@yahoo.com> Out: 452 4.3.1 Insufficient system storage Out: 421 4.7.0 mydomain.example.pl Error: too many errors Session aborted, reason: too many errors For other details, see the local mail logfile
Could someone help me in diagnosing this problem?
Thanks in advance!
Bookmarks