Hi, thank you for the answer, and sorry for the late reply :( …

I analysed the logs thoroughly, and I can confirm my SMTP server hasn’t sent any email aside the legitimate ones.
And u/voracitude 's answer confirmed my thoughts, being that the emails were sent from somewhere else.

I don’t think it’s that much unusual to use a “small” domain for spoofing: SMEs are “easy targets” usually, and if the recipient’s anti-spam isn’t configured properly then the attackers could benefit from a domain which may be small but has a good reputation.

@intelisense
Hello, thank you for your answer and sorry for the late reply.

I took some time analyzing my SMTP server logs, and it contains 100% legit outgoing traffic. And no successful SSH connection for weeks on the server so it can’t have been erased.
u/voracity confirms my thoughts as well. I think the issue is outside and unrelated to my server. And the e-mail address in question seems to have leaked from several places according to haveibeenpwned (the password is safe though).

RE: lemmy.world/comment/7170785

@voracitude Thank you very much! This confirms my worries, not much can be done…

@wintermute_oregon
I tested on Mxtoolbox, it shows my server isn’t an open relay.

@intelisense
Those are properly configured, I get a 10/10 on mail-tester dot com, as well as everything validated on mxtoolbox.

@Magiwarriorx@lemmy.world i think it’d be very intensive in terms of disk and network usage. Not only for the r/place-like host, but also for other Fediverse server admins.

" la majorité des gens n’aurait pas besoin d’acheter un smartphone neuf, si seulement les mises à jour étaient faciles à avoir après 3 ans…"

Tout est dit en une phrase, je pense…