normal?

michabbs

Active Member
May 5, 2020
121
16
38
Hi, I need your thoughts...
I have small local server that receives 20 or maybe 50 legitimate mails a day. I has been so for years and worked perfect. And it still works perfect, but my tracking center looks so:

1719504123005.png
PMG does its job excellent - all these mails are spam and indeed should be rejected. My question is: Is it "normal"? How does it look on your side?
I did not get tons of spam in the past, and now it's never ending line of rejected mails... :-(

Example log looks so:

2024-06-27T14:36:34.851577+00:00 zack postfix/smtpd[1605586]: connect from unknown[*]
2024-06-27T14:36:36.190313+00:00 zack postfix/smtpd[1605586]: NOQUEUE: reject: RCPT from unknown[*]: 554 5.7.1 <*>: Recipient address rejected: Rejected by SPF: * is not a designated mailserver for * (context mfrom, on *); from=<*> to=<*> proto=ESMTP helo=<[*]>
2024-06-27T14:36:36.190625+00:00 zack postfix/smtpd[1605586]: using backwards-compatible default setting smtpd_relay_before_recipient_restrictions=no to reject recipient "*" from client "unknown[*]"
2024-06-27T14:36:37.644239+00:00 zack postfix/smtpd[1605586]: lost connection after DATA from unknown[*]
2024-06-27T14:36:37.644514+00:00 zack postfix/smtpd[1605586]: disconnect from unknown[*] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4
 
"normal?" - no. Such a title of a new thread is senseless as it does not tell us anything about your problem/question. It is not normal as it simply is not helpful :-(

Any server reachable from the open Internet is bombarded via any open port every few seconds. Of course this is true for email servers too. Some levels higher, on application layer for smtp, the same thing happens: sending spam still is a big thing. So yes, rejected emails are absolutely normal. And with SPF/DKIM etc. they seem just to become more. :-(

If your question is what "connect from unknown[*]" is: I have no idea ;-)

Best regards
 
"normal?" - no. Such a title of a new thread is senseless as it does not tell us anything about your problem/question. It is not normal as it simply is not helpful :-(
The problem is that for many years I had 50 rejects a day, and now I have 50 within a couple of minutes. I have had my own smtp server in open Internet for 25 years, and spam rate has always been below ~50%. I now it seems to be 99.9%. So the question is - was I simply very lucky in the past and what's now happening is pretty much standard for everyone else?
 
So the question is - was I simply very lucky in the past
While I do run two mailservers (one public, one restricted) I only have a very low point of view, but I believe: yes :)

A lot of people say legit Email is declining as there are other communication ways nowadays. At the same time sending spam still gets cheaper, meaning the vast amount is still rising. I have no current numbers but the unfiltered ratio above 99% is much more probable than 50%.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!