Postfix Error, Shutting Down My Box

1

I am getting hundreds of spam email, hitting my box, rendering it unavailable for user accounts

Out: 220 box.firstsightmedia.com ESMTP Hi, I’m a Mail-in-a-Box
(Ubuntu/Postfix; see https://mailinabox.email/)
In: EHLO o2.outbound-email.qz.com
Out: 250-box.firstsightmedia.com
Out: 250-PIPELINING
Out: 250-SIZE 134217728
Out: 250-VRFY
Out: 250-ETRN
Out: 250-STARTTLS
Out: 250-ENHANCEDSTATUSCODES
Out: 250-8BITMIME
Out: 250-DSN
Out: 250 SMTPUTF8
In: STARTTLS
Out: 220 2.0.0 Ready to start TLS
In: EHLO o2.outbound-email.qz.com
Out: 250-box.firstsightmedia.com
Out: 250-PIPELINING
Out: 250-SIZE 134217728
Out: 250-VRFY
Out: 250-ETRN
Out: 250-ENHANCEDSTATUSCODES
Out: 250-8BITMIME
Out: 250-DSN
Out: 250 SMTPUTF8
In: MAIL FROM:bounces+5998231-bb5f-vision=firstsightmedia.com@email.qz.com
Out: 452 4.3.1 Insufficient system storage

2

@sturner

In /etc/spamassassin/local.cf

Where you see
endif # Mail::SpamAssassin::Plugin::Shortcircuit

pyzor_options --homedir /etc/spamassassin/pyzor

add this line:

blacklist_from *@*.qz.com

So it looks like:

endif # Mail::SpamAssassin::Plugin::Shortcircuit

blacklist_from *@*.qz.com

pyzor_options --homedir /etc/spamassassin/pyzor

Though it does not look like spam to me but rather backscatter. So that may not help. Seeing one of the messages you’ve received including headers would help.

I can find no dns records for your domain … it is farsightmedia.com, right?

3

I am thinking that one of your email accounts has been used for spam. Either from the box itself or spoofed.

You need to identify the account that is receiving all of the backscatter and disable it

That may be why you are running out of disk space …

Once I can find your box and it’s DNS I can offer more info … feel free to PM me or chat with me on Slack for some help.