Am I spamming or am I being spammed

[lamp]

My mail queue is filled with these. I thought that it was a spammer who attacked one of my clients and that exim was trying to send back to the spammer.... but now I'm starting to wonder. Your thoughts:

1GmCE3-0000ir-LF-H
mailnull 47 12
<>
1164040951 0
-ident mailnull
-received_protocol local
-body_linecount 66
-allow_unqualified_recipient
-allow_unqualified_sender
-frozen 1164040952
-localerror
XX
1
[email protected]

146P Received: from mailnull by [MYMACHINE] with local (Exim 4.52)
id 1GmCE3-0000ir-LF
for [email protected]; Mon, 20 Nov 2006 11:42:31 -0500
036 X-Failed-Recipients: spam@[MYCLIENT]
031 Auto-Submitted: auto-generated
060F From: Mail Delivery System <Mailer-Daemon@[MYMACHINE]>
024T To: [email protected]
059 Subject: Mail delivery failed: returning message to sender
049I Message-Id: <E1GmCE3-0000ir-LF@[MYMACHINE]>
038 Date: Mon, 20 Nov 2006 11:42:31 -0500

1GmCE3-0000ir-LF-D
This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

spam@[MYCLIENT]
mailbox is full: retry timeout exceeded

 

[mohit]

hi,
have you set the "default mail account" on this domain to :fail: or something else ?

see ya,
mohit

 

[lamp]

All accounts on the server are set to :fail:

Are you thinking that exim is trying to send a reply back to the spammer with "Mailbox is full"... If so, is there a way to stop exim from doing that?

Thanks!
Lamp

 

[kilroy]

Looks like your email server has rejected a message and sent it back to the sender but the sender's mailbox is full.

Although you said your default email ([email protected]) is set to Fail, it seems to be behaving like it is set to Blackhole. Check out Chirpy's site. Theres a lot of useful info there.

http://www.configserver.com/free/fail.html

 

[Un Area]

This things happens when spam comes to a full mailbox and the bounce goes to nowhere. So it get stuck in queue.

You may decrease this values on /etc/exim.conf for earlier delivery and flushing. I would recomend that you comment the auto_thaw line.

It may look like this:

#auto_thaw = 7d
ignore_bounce_errors_after = 30m -> you can adjust this settings at your choice
timeout_frozen_after = 1d -> you can adjust this settings at your choice

ignore_bounce_errors_after will retry a bounce message delivery and fail if not delivered.

timeout_frozen_after is if a frozen message of any description that has been on the
queue for longer than the given time will be automatically cancelled at the next queue run

Bye!