まじか！！！！
パターンマッチングでクラックされ、そこからメールがまかれていた用だ。
件数としては、それほど無いけどクレームが来て浮き彫りになって
さっき詳細な通報時のヘッダーをもらってメッセージIDより調査した結果そうだった！
接続もとは「188.53.220.208」サウジアラビアだった！下記が生LOGである。
ろくな事してくれねーなｗ オープンリレーは一切ないし
ブラックリストチェックもバッチで監視しているから、大丈夫だと思ってたんだけどな。
サーバ運用者様お気をつけて運用されてください。
＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾＾
Oct 5 00:00:04 mx postfix/smtpd[29710]: 79D2F61A0DF: client=unknown[188.53.220.208], sasl_method=PLAIN, sasl_username=gomi1234@aaaaaa.com
Oct 5 00:00:05 mx /usr/local/sbin/geoip-policyd[29716]: address:188.53.220.208 country:SA result:DUNNO
Oct 5 00:00:17 mx last message repeated 18 times
Oct 5 00:00:18 mx postfix/cleanup[29717]: 79D2F61A0DF: message-id=<34235a9c7ebe$b96b9e62$83b274f8$@aaaaaa.com>
Oct 5 00:00:18 mx postfix/qmgr[18126]: 79D2F61A0DF: from=<marievercelletto@aaaaaa.com>, size=2000, nrcpt=20 (queue active)
Oct 5 00:00:18 mx postfix/smtpd[29722]: connect from localhost.localdomain[127.0.0.1]
Oct 5 00:00:18 mx postfix/smtpd[29722]: 9D1A361A181: client=localhost.localdomain[127.0.0.1]
Oct 5 00:00:18 mx postfix/cleanup[29717]: 9D1A361A181: message-id=<34235a9c7ebe$b96b9e62$83b274f8$@aaaaaa.com>
Oct 5 00:00:18 mx postfix/qmgr[18126]: 9D1A361A181: from=<marievercelletto@aaaaaa.com>, size=2294, nrcpt=20 (queue active)
Oct 5 00:00:18 mx postfix/smtpd[29722]: disconnect from localhost.localdomain[127.0.0.1]
Oct 5 00:00:18 mx amavis[28622]: (28622-11) Passed CLEAN {RelayedOpenRelay}, [188.53.220.208] <marievercelletto@aaaaaa.com> -> <Gary.Machado@artemiscourtage.com>,<g.vercelletto@free.fr>,<georges.markovic@free.fr>,<gilles.lebatard@free.fr>,<fredericlucfrancois@gmail.com>,<gael.nini@gmail.com>,<georges.markovic@gmail.com>,<gitelacroisette@gmail.com>,<gladys.lapalus@gmail.com>,<malakoff@guyhoquet.com>,<vanves@guyhoquet.com>,<frguise@hotmail.com>,<gaellecauvin@hotmail.com>,<gaelle-masson@orange.fr>,<gladys.lapalus@orange.fr>,<gabrielle.oiry.75112@paris.notaires.fr>,<martine.graziadey@total.com>,<geraldine.lombardo@yahoo.fr>,<grey_paris@yahoo.fr>,<guilletgilbert@yahoo.fr>, Message-ID: <34235a9c7ebe$b96b9e62$83b274f8$@aaaaaa.com>, mail_id: GPnE7ipa7x5p, Hits: -, size: 2212, queued_as: 9D1A361A181, dkim_sd=key1:aaaaaa.com, 208 ms
Oct 5 00:00:18 mx postfix/smtp[29719]: 79D2F61A0DF: to=<Gary.Machado@artemiscourtage.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=15, delays=15/0.01/0/0.21, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 9D1A361A181)
Oct 5 00:00:18 mx postfix/smtp[29719]: 79D2F61A0DF: to=<g.vercelletto@free.fr>, relay=127.0.0.1[127.0.0.1]:10024, delay=15, delays=15/0.01/0/0.21, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 9D1A361A181)
Oct 5 00:00:18 mx postfix/smtp[29719]: 79D2F61A0DF: to=<georges.markovic@free.fr>, relay=127.0.0.1[127.0.0.1]:10024, delay=15, delays=15/0.01/0/0.21, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 9D1A361A181)
Oct 5 00:00:18 mx postfix/smtp[29719]: 79D2F61A0DF: to=<gilles.lebatard@free.fr>, relay=127.0.0.1[127.0.0.1]:10024, delay=15, delays=15/0.01/0/0.21, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 9D1A361A181)
Oct 5 00:00:18 mx postfix/smtp[29719]: 79D2F61A0DF: to=<fredericlucfrancois@gmail.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=15, delays=15/0.01/0/0.21, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 9D1A361A181)
Oct 5 00:00:18 mx postfix/smtp[29719]: 79D2F61A0DF: to=<gael.nini@gmail.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=15, delays=15/0.01/0/0.21, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 9D1A361A181)
Oct 5 00:00:18 mx postfix/smtp[29719]: 79D2F61A0DF: to=<georges.markovic@gmail.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=15, delays=15/0.01/0/0.21, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 9D1A361A181)
