Dead.letter growing fast

[republicus]

Hi,

In main.cf the only IP specified is the ones under mynetworks:

Code:

mynetworks = 127.0.0.1, 195.201.146.xxx, 176.9.3.xxx

I have modified the main.cf and master.cf to enable SSL on email server. But it has been working fine for months. It suddenly started doing this.
IP 0.0.0.0 is not mentioned anywhere. The closes is 127.0.0.1 which is in master.cf:

Code:

127.0.0.1:10025 inet n  -       y       -       -       smtpd -o mynetworks=127.0.0.0/8

Yes I have CSF installed. It's a great security addition :-)

---

Is it CSF who is dumping all these log entries into the dead.letter file?

It turns out POSTFIX should be listening to 0.0.0.0:25 and this is normal behavior:

Code:

[root@sentora-dev ~]# netstat -lnp | grep :25 tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      612/master tcp6       0      0 :::25                   :::*                    LISTEN      612/master

Note: netstat on CentOS requires yum install net-tools

Yes, it is CSF generating the alerts.