Unsolicited e-mail, comments or posts, often sent out in large volumes; possibly but not necessarily commercial in nature

learn more… | top users | synonyms

0
votes
1answer
108 views

Postfix Localhost Server Sending Spam to Itself

I have an iRedMail server that runs Postfix and am trying to determine the source of its spam problem. I have since changed the MX records on the domain for the address receiving spam and the good ...
2
votes
1answer
42 views

SPF “include:” does MX stay as included domain's MX, or get translated to the includer's MX?

SPF records allow you to include another's domains SPF record within your own. For example, example.com can have include:_spf.google.com in its SPF record to include all of the SPF rules for ...
0
votes
0answers
38 views

How to block referral source on apache with special characters?

I've been getting referral spam on my site. I've tried several options to block it, but it still hits it. I think it has to do with being special characters on the referral? This is the referral ...
3
votes
0answers
109 views

Postfix reject_rbl_client Blacklists Not Working

I have a mail server (iRedMail) that uses Postfix. I've been getting a lot of spam, so I modified the /etc/postfix/main.cf file and have the smtpd_recipient_restrictions set to this: ...
-1
votes
1answer
37 views

Add a second IP to SPF record, from an external SMTP server [closed]

I would like to add the IP of an external SMTP server to an existing SPF record, which is looks like this: "v=spf1 a mx ip4:185.6.139.6 a:frey.mailpool.1.netmask.hu a:frey.mailpool.2.netmask.hu ...
0
votes
0answers
79 views

SpamAssasin FSL_HELO_BARE_IP_2 and RDNS_DYNAMIC error

Why I got FSL_HELO_BARE_IP_2 and RDNS_DYNAMIC error from SpamAssasin? This message was send from an authenticated client (host02-4-dynamic.17-80-r.retail.telecomitalia.it) to a Exim4 server ...
0
votes
2answers
81 views

Postfix sent mails are bounced or go to spam

I recently tried setting up a mail server to be able to send mail for the websites I host with apache. At first I tried to work with exim but I was overflown with error messages and mails I tried to ...
0
votes
0answers
22 views

Emails ending up in gmail spam folder [duplicate]

Emails from my dedicated server are ending up in spam folder in gmail even though the server is not blacklisted and with good reputation - see below. the server level issues that would cause this ...
7
votes
3answers
161 views

Is SRS rewriting absolutely necessary for a forwarding mailserver?

I am operating a Postfix email server for my domain, say mydomain.com. It mostly acts as a forwarding email server: users receive an email address @mydomain.com, but usually elect to have their ...
1
vote
1answer
31 views

Postfix: reject mail, but still deliver or archive in a folder for spam analysis

I'm using Postfix and Spamassassin, and Postfix is rejecting incoming mail that fall into spam rules. Mail are then forwarded to different relays based on many factors. Is there a way to archive ...
2
votes
0answers
27 views

Does sending mail on behalf of another domain (using a Sender: header) increase chances of being marked as spam?

Our marketing department is contracting with a service that will send email to prospective customers on our behalf. From what I'm gathering from their documentation, it sounds like they do so via the ...
3
votes
1answer
241 views

Should local network host names and IPs be stripped from mail headers?

I'm completely confused about question of necessity/benefit of stripping local network host names and IPs from from mail headers. Two years ago I've found an article which states that modern ESPs ...
0
votes
0answers
7 views

whitelisting mail server with outlook [duplicate]

For some reason, my mail server works with every email address except for outlook.com; I don't know how to fix this issue because most of my country's partners and clients use office365. I am using ...
0
votes
1answer
51 views

Email in SPAM with Debian 8.2 [duplicate]

I have a problem (BIG PROBLEM) with SPAM. All the emails my mail server (Debian 8.2 and ispconfig latest stable) send, end up in spam. I'm using Google Apps. I did a test on spamscorechecker.com ...
-1
votes
1answer
43 views

Spam from my email address on my domain with DKIM

Someone is sending spam emails from my email address. And it looks like these emails have DKIM. How is this can be possible if they doesn't have access to that email? (my emails handles by something ...
3
votes
1answer
25 views

spamassassin how to remove explanation and score breakdown in the message?

I have setup SpamAssassin in Windows (using the JamSoftware), created a service for spamd.exe and currently SpamAssassin works fine. However, I would like to disable the explanation that SpamAssassin ...
0
votes
2answers
49 views

How do IPs end up on the spam blacklists

I don't know if this is the right place to ask this kind of question but here goes. I have 3 IPs on my server, which I'm running for shared hosting. The main shared IP gets blacklisted sometimes, ...
0
votes
1answer
35 views

How to prevent spammers sending bogus@mydomain emails out of my name [duplicate]

Lately I receive a lot of Delivery Status Notification (Failure) e-mails. Bogus spam email is sent from blablaxx@mydomain to other emailadresses, and bounce back to my catch-all info@mydomain with ...
0
votes
0answers
110 views

DKIM, SPF, DMARC, SPF OK mails are flagged as SPAM

I have a dedicated server running CentOS7 with Postfix, the problem is that all the sent mails are flagged as SPAM by hotmail and gmail despite DKIM, SPF, DomainKeys, DMARC records and keys wich are ...
0
votes
1answer
28 views

How to block referrers that come from specific domain TLD?

Recently I'm getting many hits to my website coming from spam referrers using different domain names and they're all .ru domains. I'm using Nginx on my server. Currently I'm using the below code to ...
2
votes
1answer
2k views

How can I prevent spoofed emails from outside thats using my internal accepted domain

I'm receiving spam emails sent from my own domain to my own domain. I'm using Exchange 2013. Example: myemail@mydomain.com is being used to send spam to myemail@mydomain.com. I can successfully ...
1
vote
0answers
306 views

Outlook.com rejects: 550 SC-001 (BAY004-MC5F13)

I am operating a cluster of 3 dedicated machines for a webapp, each of those uses sendmail as MTA. Hostnames are node1.domain.com node2.domain.com node3.domain.com Unfortunatelly outlook.com rejects ...
1
vote
2answers
179 views

Firewall rule to only allow Postfix to send email through SMTP on port 25

As suggested in How do you detect a spambot on your network? how can I setup firewall rule to allow only Postifx to send emails using SMTP on port 25 and disallow all other applications to send on ...
1
vote
1answer
49 views

It's OK to only have SMTP for server-to-server communication?

I'm configuring an antispam appliance to filter mail traffic coming to our Exchange server. The flow will be something like this: ...
2
votes
4answers
446 views

False IP blacklisting on CBL and Spamhaus ZEN

I've gone thru this: Spamhaus XBL keeps adding my IP I'm managing the server 23.239.30.81 on Ubuntu using Postfix. Since last 6 months or so I started forwarding all my: Cron Daemon logs ...
1
vote
3answers
103 views

How can I find out which script/program/user invokes exim (and is sending spam)?

The problem A client of mine asked me to take a look at his shared-hosting webserver for the following problem, but I'm stuck at finding out what's wrong. His server is being blacklisted by a lot of ...
1
vote
0answers
24 views

Setting DKIM and SPF records for client domains

I have created an email server that is capable of handling mail for multiple websites. e.g. tom@website1.com, tom@website2.com etc. The emails are sending and receiving fine, but the spam score is ...
0
votes
0answers
26 views

How to send a lot of emails without tripping the alarms

I need to send couple of thousand emails at once, all addresses are existing users of one domain. I was wondering if that would not cause receiving server to cry 'Spam!' at the sight of so many ...
0
votes
1answer
67 views

Email Authentication Report (Scoring neutral)

I'm having some trouble trying to get my company emails to return a better score from Port25s authentication verifier service. I'm scoring neutral on most of the results. I've included the report ...
-1
votes
1answer
52 views

How to improve spam protection using postfix? [duplicate]

I try to improve the spam protection of my postfix install for several weeks now, but I still receive spam. What I've done so far: Added SpamAssassin Added SPF record Tuned rejection rules Now ...
4
votes
2answers
50 views

Is it OK to run my own mail server for email forwarding? [closed]

A lot of people advise against running your own mail server; they recommend using a SAS that is more experienced in this area (Google Apps Gmail, AWS WorkMail, etc). I want to run Postfix MTA to ...
0
votes
1answer
40 views

Same mailserver, two domains. One domain flagged as spam. Possible causes?

I own two domains, let's call them example.com and mydomain.net. These two domains point to the same ip address, let's say x.x.x.x, and both their A and MX records point to them. They also have SPF ...
0
votes
0answers
24 views

CentOS 6.6 rogue mail process? Server sending spam [duplicate]

Our server has been recently compromised and was sending spam emails. We've found the php scripts responsible, eliminated them, and updated the postfix configuration. Problem is that when we ran the ...
-3
votes
1answer
27 views

Some type of spam?

Found this in my access log, seems someone tried to do it almost 7000 times. 5.147.128.141 - - [26/Oct/2015:10:24:46 -0500] "POST ...
2
votes
0answers
128 views

Dealing with spam flood in Postfix + Amavis

I run a mail server for several thousand users. It uses Postfix + Amavis (with SpamAssassin + Clam). Most of the time it's a pretty happy setup, but from time to time we receive a flood of ...
0
votes
0answers
85 views

mod_evasive: Stop attacks against wp-login.php

i would like to stop attacks against some user's WordPress-installations on my server. This is an example of an attack: 91.208.65.12 - - [20/Oct/2015:10:33:08 +0200] "POST /wp-login.php HTTP/1.0" ...
9
votes
1answer
195 views

Postfix emails detected as spam with gmail [duplicate]

I know that there are a few posts about this and I have been reading them for a while now but still, I can't resolve my issue. I’m running ISPconfig with postfix and I can’t figure out why my ...
0
votes
0answers
18 views

How to find source of spamming knowing the spam mail header? [duplicate]

Context: I have a Dedicated Server hosted on Digital Ocean, called as "Droplet" and then, on it i have installed CentOS 6, and my mailing server is using EXIM. Problem: I am having spam issues on ...
0
votes
1answer
85 views

How to Stop Exchange Server 2003 sending out Mass Spam / Virus Email from Unkown Account?

I'm young and new to the scene, I have been working on a family member's business server. It is an old server and has a few problems but has a big main one I'm trying to fix now. I'll try be as clean ...
-1
votes
2answers
245 views

Disable php scripts from sending mails [duplicate]

My question is regarding preventing php scripts from sending mail. It has been marked a duplicate of another more general question about server security but that's not what this question is about. ...
2
votes
1answer
156 views

ejabberd: prevent the use of messages with subject by spammers

Recently there have been noticed a sudden surge in Jabber/XMPP spammers activity. Spammers not only manage to send a regular messages to users, like this: but also a some kind of announcement ...
-1
votes
2answers
129 views

Is this someone trying to hack the server?

I keep seeing the following coming up in my nginx and Apache server log files as a 400: () { :; }; /bin/ping -c 3 x.x.x.x x.x.x.x is different IPs. Does this look like a hacker trying to find a ...
2
votes
2answers
234 views

Spamhaus XBL keeps adding my IP

Several days ago I found a message which was rejected in my inbox. It said that my IP is listed on Spamhaus XBL. Their page states: The reasons could be an Open Proxy or Spambot/Trojans. Checked all ...
0
votes
0answers
14 views

Spam is sent from my IP address [duplicate]

I have a server on Ubuntu, with Exim running on it. My VPS company reported to me that spam is being sent from my IP. When I check the exim mainlog I see this error, how can this email access and send ...
-2
votes
2answers
88 views

Mitigating spam on Linux server where all MTA's (Postifix, PHP Mail() function) etc. are disabled [duplicate]

We have a Debian Squeeze server running a fairly standard LAMP stack (back in the days it was set up using the Perfect Server guide at Howtoforge, so we're using ISPConfig as our backend admin panel) ...
0
votes
3answers
392 views

Properly configuring DNS for email sending on multi-domain hosting VPS

Background I have a VPS, with one external IP hosting <10 domains (DOMAIN.TLD). Each domain receives and sends email. Each domain has associated DKIM / SPF / MX entries. The PTR record exists and ...
1
vote
1answer
113 views

How To Only Restrict PHP5/Apache to Send Mail Only To Local Users

I need some help. I am running lastest stable Ubuntu which hosts Apache/PHP5 and also delivers email. I host some WordPress sites for other users and have been waging a war for months now combatting ...
0
votes
1answer
114 views

Server is blacklisted on Cloudmark but EXIM logs showing no evidence of outgoing spam

My server is getting the following warning when sending email SMTP error from remote mail server after initial connection: 554 p3plibsmtp01-04.prod.phx3.secureserver.net bizsmtp IB103. Connection ...
1
vote
4answers
515 views

How to find spam email sending script on server

For last 3 months i am getting email from my hosting providers that my server is sending spam emails and today i did research on it and found that it is actually doing. I used exim to check out the ...
-1
votes
1answer
133 views

Exchange 2013 Receive Connector Scoping and Open Relay

I have an Exchange 2013 server which was a victim of spam infiltration, and the exchange server was being used as an open relay for unauthorized users (and domains) to remotely send spam. I have done ...