<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title><![CDATA[iRedMail — postqueue entries at too high a rate]]></title>
		<link>https://forum.iredmail.org/topic20685-postqueue-entries-at-too-high-a-rate.html</link>
		<atom:link href="https://forum.iredmail.org/feed-rss-topic20685.xml" rel="self" type="application/rss+xml" />
		<description><![CDATA[The most recent posts in postqueue entries at too high a rate.]]></description>
		<lastBuildDate>Mon, 25 Nov 2024 02:47:36 +0000</lastBuildDate>
		<generator>PunBB</generator>
		<item>
			<title><![CDATA[Re: postqueue entries at too high a rate]]></title>
			<link>https://forum.iredmail.org/post89929.html#p89929</link>
			<description><![CDATA[<p>Maybe some account was cracked and used to send spams. Check the Postfix log file to figure it out.</p>]]></description>
			<author><![CDATA[null@example.com (ZhangHuangbin)]]></author>
			<pubDate>Mon, 25 Nov 2024 02:47:36 +0000</pubDate>
			<guid>https://forum.iredmail.org/post89929.html#p89929</guid>
		</item>
		<item>
			<title><![CDATA[postqueue entries at too high a rate]]></title>
			<link>https://forum.iredmail.org/post89923.html#p89923</link>
			<description><![CDATA[<p>==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====<br />- iRedMail version (check /etc/iredmail-release): 1.7.0<br />- Deployed with iRedMail Easy or the downloadable installer? downloadable<br />- Linux/BSD distribution name and version: Debian bookworm<br />- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MariaDB&nbsp; <br />- Web server (Apache or Nginx): Nginx<br />- Manage mail accounts with iRedAdmin-Pro? Yes<br />- [IMPORTANT] Related original log or error message is required if you&#039;re experiencing an issue.<br />====</p><p>How to block users who appear to be trying to DDOS postfix? </p><p>For the past couple of weeks, the postqueue command returns 10-20 entries like this every day:</p><p>4XvfGM1lGBzHRHk&nbsp; &nbsp; &nbsp; &nbsp;1940 Thu Nov 21 18:30:35 postmaster@example.org<br />(host gmail-smtp-in.l.google.com[2607:f8b0:4023:c0d::1b] said: 450-4.2.1 The user you are trying to contact is receiving mail at a rate that 450-4.2.1 prevents additional messages from being delivered. Please resend your 450-4.2.1 message at a later time. If the user is able to receive mail at that 450-4.2.1 time, your message will be delivered. For more information, go to 450 4.2.1&nbsp; <a href="https://support.google.com/mail/?p=ReceivingRate">https://support.google.com/mail/?p=ReceivingRate</a> d2e1a72fcca58-724ea167815si1872327b3a.311 - gsmtp (in reply to RCPT TO command))<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;someuser@gmail.com</p><p>(In this example I&#039;ve obfuscated the postmaster and recipient&#039;s emails, but otherwise this is straight from the postqueue command.)</p><p>The recipient addresses appear to be random; they don&#039;t have accounts on my system. </p><p>I can delete the postqueue entries with a command like this:</p><p>for i in `pq | cut -d &quot; &quot; -f 1 | grep 4X` ; do sudo/sbin/postsuper -d $i ; done</p><p>But (a) that might also delete valid postqueue entries and (b) if there&#039;s a way of addressing the root problem, I&#039;d prefer to do that instead. Thank you!</p>]]></description>
			<author><![CDATA[null@example.com (cvcvelo)]]></author>
			<pubDate>Sat, 23 Nov 2024 01:44:16 +0000</pubDate>
			<guid>https://forum.iredmail.org/post89923.html#p89923</guid>
		</item>
	</channel>
</rss>
