Unsolicited e-mail, comments or posts, often sent out in large volumes; possibly but not necessarily commercial in nature

learn more… | top users | synonyms

1
vote
3answers
112 views

How can I find out which script/program/user invokes exim (and is sending spam)?

The problem A client of mine asked me to take a look at his shared-hosting webserver for the following problem, but I'm stuck at finding out what's wrong. His server is being blacklisted by a lot of ...
1
vote
0answers
29 views

Setting DKIM and SPF records for client domains

I have created an email server that is capable of handling mail for multiple websites. e.g. tom@website1.com, tom@website2.com etc. The emails are sending and receiving fine, but the spam score is ...
0
votes
0answers
29 views

How to send a lot of emails without tripping the alarms

I need to send couple of thousand emails at once, all addresses are existing users of one domain. I was wondering if that would not cause receiving server to cry 'Spam!' at the sight of so many emails....
0
votes
1answer
78 views

Email Authentication Report (Scoring neutral)

I'm having some trouble trying to get my company emails to return a better score from Port25s authentication verifier service. I'm scoring neutral on most of the results. I've included the report ...
-1
votes
1answer
57 views

How to improve spam protection using postfix? [duplicate]

I try to improve the spam protection of my postfix install for several weeks now, but I still receive spam. What I've done so far: Added SpamAssassin Added SPF record Tuned rejection rules Now I'...
4
votes
2answers
50 views

Is it OK to run my own mail server for email forwarding? [closed]

A lot of people advise against running your own mail server; they recommend using a SAS that is more experienced in this area (Google Apps Gmail, AWS WorkMail, etc). I want to run Postfix MTA to ...
0
votes
1answer
40 views

Same mailserver, two domains. One domain flagged as spam. Possible causes?

I own two domains, let's call them example.com and mydomain.net. These two domains point to the same ip address, let's say x.x.x.x, and both their A and MX records point to them. They also have SPF ...
0
votes
0answers
24 views

CentOS 6.6 rogue mail process? Server sending spam [duplicate]

Our server has been recently compromised and was sending spam emails. We've found the php scripts responsible, eliminated them, and updated the postfix configuration. Problem is that when we ran the ...
-3
votes
1answer
27 views

Some type of spam?

Found this in my access log, seems someone tried to do it almost 7000 times. 5.147.128.141 - - [26/Oct/2015:10:24:46 -0500] "POST /E29B290A-F63C-A647-AC51-14BDE51AB2B4/B06877C8-CED9-9341-A670-...
3
votes
2answers
165 views

Dealing with spam flood in Postfix + Amavis

I run a mail server for several thousand users. It uses Postfix + Amavis (with SpamAssassin + Clam). Most of the time it's a pretty happy setup, but from time to time we receive a flood of virus/...
0
votes
0answers
95 views

mod_evasive: Stop attacks against wp-login.php

i would like to stop attacks against some user's WordPress-installations on my server. This is an example of an attack: 91.208.65.12 - - [20/Oct/2015:10:33:08 +0200] "POST /wp-login.php HTTP/1.0" ...
9
votes
1answer
219 views

Postfix emails detected as spam with gmail [duplicate]

I know that there are a few posts about this and I have been reading them for a while now but still, I can't resolve my issue. I’m running ISPconfig with postfix and I can’t figure out why my ...
0
votes
0answers
18 views

How to find source of spamming knowing the spam mail header? [duplicate]

Context: I have a Dedicated Server hosted on Digital Ocean, called as "Droplet" and then, on it i have installed CentOS 6, and my mailing server is using EXIM. Problem: I am having spam issues on ...
0
votes
1answer
119 views

How to Stop Exchange Server 2003 sending out Mass Spam / Virus Email from Unkown Account?

I'm young and new to the scene, I have been working on a family member's business server. It is an old server and has a few problems but has a big main one I'm trying to fix now. I'll try be as clean ...
-1
votes
2answers
322 views

Disable php scripts from sending mails [duplicate]

My question is regarding preventing php scripts from sending mail. It has been marked a duplicate of another more general question about server security but that's not what this question is about. ...
2
votes
1answer
182 views

ejabberd: prevent the use of messages with subject by spammers

Recently there have been noticed a sudden surge in Jabber/XMPP spammers activity. Spammers not only manage to send a regular messages to users, like this: but also a some kind of announcement ...
-1
votes
2answers
136 views

Is this someone trying to hack the server?

I keep seeing the following coming up in my nginx and Apache server log files as a 400: () { :; }; /bin/ping -c 3 x.x.x.x x.x.x.x is different IPs. Does this look like a hacker trying to find a ...
2
votes
2answers
245 views

Spamhaus XBL keeps adding my IP

Several days ago I found a message which was rejected in my inbox. It said that my IP is listed on Spamhaus XBL. Their page states: The reasons could be an Open Proxy or Spambot/Trojans. Checked all ...
0
votes
0answers
15 views

Spam is sent from my IP address [duplicate]

I have a server on Ubuntu, with Exim running on it. My VPS company reported to me that spam is being sent from my IP. When I check the exim mainlog I see this error, how can this email access and send ...
-2
votes
2answers
94 views

Mitigating spam on Linux server where all MTA's (Postifix, PHP Mail() function) etc. are disabled [duplicate]

We have a Debian Squeeze server running a fairly standard LAMP stack (back in the days it was set up using the Perfect Server guide at Howtoforge, so we're using ISPConfig as our backend admin panel) ...
0
votes
3answers
468 views

Properly configuring DNS for email sending on multi-domain hosting VPS

Background I have a VPS, with one external IP hosting <10 domains (DOMAIN.TLD). Each domain receives and sends email. Each domain has associated DKIM / SPF / MX entries. The PTR record exists and ...
1
vote
1answer
122 views

How To Only Restrict PHP5/Apache to Send Mail Only To Local Users

I need some help. I am running lastest stable Ubuntu which hosts Apache/PHP5 and also delivers email. I host some WordPress sites for other users and have been waging a war for months now combatting ...
0
votes
1answer
142 views

Server is blacklisted on Cloudmark but EXIM logs showing no evidence of outgoing spam

My server is getting the following warning when sending email SMTP error from remote mail server after initial connection: 554 p3plibsmtp01-04.prod.phx3.secureserver.net bizsmtp IB103. Connection ...
1
vote
4answers
564 views

How to find spam email sending script on server

For last 3 months i am getting email from my hosting providers that my server is sending spam emails and today i did research on it and found that it is actually doing. I used exim to check out the ...
-1
votes
1answer
186 views

Exchange 2013 Receive Connector Scoping and Open Relay

I have an Exchange 2013 server which was a victim of spam infiltration, and the exchange server was being used as an open relay for unauthorized users (and domains) to remotely send spam. I have done ...
-4
votes
1answer
141 views

How to detect which PHP script is sending SPAM [duplicate]

A php script is sending tons of emails. I want to detect what is the source. All emails are sent by the use www-data which the user used by apache. When I check process, I have this result : www-data ...
0
votes
0answers
13 views

Prevent email from [duplicate]

I have my own email sub-domain which I use to send my clients email invoices and announcements. I rarely use the email to conduct any marketing to the outside world, so it's the same 2-3k clients that ...
2
votes
0answers
20 views

How To Stop Apache Logging Client Denied By Server Errors [duplicate]

I get an annoying amount of spam traffic from the Ukrane, Russia, Korea etc. I have setup rules in my .htaccess file to block all of these countries and it's working great. The problem i have now is ...
1
vote
0answers
26 views

Do spam filters work if I use a forwarding address?

I made the mistake of replying to a linkedin connection request with my main forwarding email and have started getting spam after years of no spam (have blocked linkedin requests now). I have been ...
-1
votes
1answer
313 views

Block outgoing emails from Postfix from non-existent users

I'm getting spam sent through my server. The sender names are always random, but always in the form randomname@mydomain.com. I've tried adding reject_unlisted_senders to the ...
3
votes
2answers
5k views

All External Mail to Office 365 Fails SPF, Marked as Junk by EOP in a Hybrid Deployment

In short: legitimate emails are landing in Junk folders as EOP (Exchange Online Protection) stamps email messages as junk (SCL5) and SPF-failed. This happens with all external domains (e.g. gmail.com/...
2
votes
1answer
121 views

Does order of UFW rules matter?

When I first initialized my ufw, I did ufw default allow outgoing ufw default deny incoming ufw allow 80/tcp ufw allow 22/tcp Over the last week or so, I've been going through my access logs and ...
0
votes
0answers
209 views

SpamAssassin not filtering well on Mac OS X Server

I am trying to deal with an increasing number of spam messages on a server I administer. We are using Mac OS X Server and have added the following RBL Servers to the blacklisting feature in Server....
-3
votes
1answer
315 views

Postfix - Allow emails to virtual domains but block spam?

My Postfix is set up with virtual domains. This allows people to send an email to *@mydomain.com and it'll be forwarded to my gmail account. Basically the end goal is to simply allow people to email ...
0
votes
0answers
54 views

Postfix, procmailrc, SpamAssassin letting some but not all spam messages through

I have postfix running on my server with a main.cf as follwos:- myorigin = $mydomain inet_interfaces = 213.229.80.33, 127.0.0.1 mydestination = 213.229.80.33, corunna.com, localhost, corunnasystems....
2
votes
2answers
202 views

Postfix seems to send spam

I recently discovered this in my postfix-log: Aug 4 11:09:12 mail postfix/smtpd[71597]: connect from unknown[59.88.35.206] Aug 4 11:09:14 mail postfix/smtpd[71597]: Anonymous TLS connection ...
0
votes
1answer
142 views

Exchange 2010 - how to hide first hop IP from mail headers

My company has an Exchange server which forward outgoing emails to a mailhub, which has a spam filter. (user)----(company's Exchange)----(mailhub with antispam)----(the world) It happens that my ...
1
vote
1answer
80 views

nginx spam 404 errors

My server is spammed by multiples XXX domains, there is a lot of 404 errors in my logs and i can't find the solution to stop that. 2015/07/31 09:13:20 [error] 7070#0: *610 open() "/var/www/domain/...
1
vote
1answer
322 views

How Does DNSWL work? How can I gain better trust? [closed]

How does DNSWL work? It's clear to me when someone report a spam, but how can I gain a higher score/trust? Do some companies report "good" servers? Or will the score go up with time without reporting ...
2
votes
1answer
130 views

ipset not being applied to iptables

I'm trying to filter out a country that keeps probing my SMTP server (CentOS6) and I can't seem to get the ipset to work out right in iptables. I downloaded that countries IP addresses from ipdeny....
2
votes
2answers
117 views

Spam mail forwarded through my server using valid user

I am getting "Undelivered Mail Returned to Sender" messages. The relevant mail messages are being forwarded using a valid user (mike@proactech.com) on my server (server1.nbicharts.com). I control ...
-1
votes
1answer
85 views

Spam sent from my domain after a Wordpress exploit [duplicate]

I have 2 domains on my dedicated server running debian. One of them is linked to a wordpress site, mydomain.com. I've noticed that on both my sites, lately, the performances were horrible so I ...
1
vote
2answers
45 views

Is DMARC helpful to me if I don't need reporting?

I have SPF and DKIM setup and working for the email domain I administer. The next recommended step is to setup DMARC since SPF and DKIM are both in place. What are the benefits of using DMARC if both ...
6
votes
1answer
56 views

How Does Low Volume Affect (esp. live.com) Email Deliverability?

I've been sending emails for years with out any serious reputational shocks, but with low IP volumes (no bulk mail or automated transactional email), even with multiple Domain names. My Gmail ...
1
vote
1answer
157 views

exim: How to reject spam mail depending on destination domain

Currently, I have exim set up to mark spam mail, and reject spam mail with high scores, using these ACL instructions in the acl_smtp_data ACL: warn condition = ${if <{$message_size}{500000}{1}{...
2
votes
1answer
28 views

Will spamassassin’s bayes filter work if learned spam mails have *SPAM* in the subject?

When my mail setup detects that a mail is spam, it puts *SPAM* in the subject. Now I want to improve my bayes filter by training it on my corpus of spam. If I feed these thousands of mails to sa-...
1
vote
1answer
774 views

SpamAssassin with dovecot-antispam training

I'm trying to get dovecot-antispam working with SpamAssassin' sa-learn. This is my Dovecot configuration: antispam_backend = pipe antispam_trash = trash;Trash;Deleted Items; Deleted Messages ...
2
votes
1answer
50 views

Can IP reputation be affected due to automatic forwarding?

I am hitting a dead wall with the support team of my email hosting provider. The IP they assigned me was blacklisted and so sending emails to AOL.co.uk end up getting rejected. After several emails ...
1
vote
0answers
107 views

New Exchanger Server installation - Email marked as spam on hotmail/outlook

New to the email hosting scene - running an Exchange 2013 box. Email is always (literally, always) marked as spam when sending out to my outlook.com account. Whereas if its sent to an email address ...
0
votes
1answer
126 views

Forward all SMTP traffic to anti-spam server except for authenticated SMTP?

Historically, we have handled SMTP traffic across a handful of multipurpose servers each with their own local spam-fighting stack. We've grown and this is no longer feasible to maintain. Now we have a ...