Tag Info

New answers tagged

0

Your rule never takes effect because you have added it to the end of the chain. Immediately preceding it is a rule to drop all traffic, thus your rule is never reached. In iptables, rules are matched in order; this is different than many other firewalls. To resolve the problem, move the rule up to earlier in the chain. And if you really want to blacklist ...


2

You've done some digging, and found that the original outbound email was sent through your server. That means that, unusually in such cases, you weren't joe-jobbed. Digging through the logs has shown that the user in question authenticated to send email from Orange Slovakia, which will most likely be a mobile connection. You should ask this user why he's ...


1

More likely than a server vulnerability exploitation, this looks like spoofing source address. One of the methods to deal with this (but not entirely mitigate), is to use SPF records. There are currently no SPF records for proactech.com domain. This means that the target mail servers can not verify whether an incoming message comes from your mail server ...


0

Okay, turns out I was thinking of the wrong command (sorry about that). What you want is Export-Mailbox. You would pipe a list of mailboxes to that command, include only the folder you want, then push those messages to your SPAM recipient mailbox OR you could output them directly into a PST file using the same command. Reference: ...


1

Well, after a lot of unlucky tries, I've managed to find a way to correct the problem. For people having the same problem or similar, here's how I proceeded : Update your wordpress Connect to your wordpress admin panel if you can and uninstall all unused themes and plugins If you can't, delete them from your server (default path is [your web ...


1

Yahoo.co.uk still don't have spf information: host -t txt yahoo.co.uk yahoo.co.uk descriptive text "Yahoo! Inc."


2

You can set an ACL variable in acl_check_rcpt, e.g. warn set acl_m0 = ${domain} logwrite = recipient domain = ${domain} And then you can use $acl_m0 in acl_check_data.


0

SpamRats is a very unreliable blacklist. They basically ignore everyone including ISPs, so there are always a good number of innocent sites listed by their system. Ignore or remove Spamrats and use the more reliable lists like Spamhaus, SpamCop, Truncate, UCEprotect.


0

Just so you know, the 'blunderbuss' only comes out when sufficient IP(s) in the class C all are detected as being a spam source, however the SpamRats! team is very good about helping you get unlisted if your server is properly configured, even if it is in the middle of a class C full of spammers.


0

This is indeed a very good technique, especially for fighting snowshoe, a type of spam where the entire email blast is out the door in a matter of minutes. This is because anti-spam servers take about that long to process anything that arrives and then pump out their spam definitions. I don't know of any ready-to-use software that can do this locally, but ...


2

When you move message, then dovecot invoke the sa-learn with dovecot's UID, so sa-learn hasn't enough permissions to update bayesian databases. You have to add dovecot's user to the spamd group and ensure you have the next line bayes_file_mode 0660 in the etc/spamassassin/local.cf file. Also you have to verify is bayes databases already have permissions ...


1

Finally I found a solution to filter outgoing spam with header_checks, though I do not know how effective and efficient it can be. Warning: this mitigation technique solution does not clean the infection. it is only useful when the attack sends spam by using the real domain name and faked user names or email accounts as senders (From:). when the infection ...


2

This is more than likely the case. Most providers have in effect a spam and virus filter, so before the original email is delivered it will be caught and discarded / not forwarded. Is this an IP address dedicated to you? If not, others using the IP address (example case, shared hosting) may be contributing towards the negative reputation.



Top 50 recent answers are included