Questions tagged [spam]
Unsolicited e-mail, comments or posts, often sent out in large volumes; possibly but not necessarily commercial in nature
1,404
questions
0
votes
0
answers
8
views
postfix bounce_queue_lifetime and maximal_queue_lifetime
i have done a lot of research but still cannot clearly understand what is the difference between postfix bounce_queue_lifetime and maximal_queue_lifetime in main.cf. Although I've read a lot of ...
0
votes
0
answers
21
views
Can I ignore certain visitors when using Goaccess?
I want to use goaccess to see how many real visitors my website is getting.
Unsurprisingly my logs are filled with traffic from bots so I'm looking for a way to filter that out.
In the interests of ...
0
votes
0
answers
76
views
All emails to Gmail bounce as spam
My organization failed to make changes in time to meet the new requirements that came into effect on Feb 1st. So all emails to Gmail are rejected as spam.
We have since updated all our records so we ...
0
votes
2
answers
66
views
How to detect non-latin scripts in email subject?
On my mail server running Postfix, I want to reject mails using some non-latin scripts in their subject, in particular Arabic and Cyrillic since none of my users (family) speak languages that use them....
0
votes
1
answer
98
views
Weird email spam issue. Google Domain Exchange email server
We have a client who is blocking our email domain.
Their IT wrote this to us. I've never seen this be an issue before.
You are hosted on Google but have entries referring to Microsoft email protection ...
0
votes
2
answers
63
views
Check incoming email adresses on exchange server
We are using Exchange Server with Outlook, and a CMS system to manage our customer's Email addresses. The CMS can export the email address list and we could import it somewhere to outlook/exchange, if ...
0
votes
1
answer
83
views
postfix sending only short messages ( emails ) but not long messages?
when I am sending a short email from "[email protected]" or any other email acc , the message is received well in the inbox of Gmail , hotmail etc , but if I send the message again with long ...
0
votes
2
answers
117
views
Spammers are using my mail server to send out emails
Lately spammers are using my mail server to send emails to different addresses.
For example, a colleague of mine received an email that was supposedly self-sent (it was not).
Looking at the ...
-2
votes
1
answer
59
views
Spam filters: IP address with no history v. good history [closed]
Zoho gave me an IP address with no history this week. Senderscore.org says there's insufficient data to evaluate it. At other times Zoho has assigned me an email sending IP with a fair or good score.
...
0
votes
1
answer
94
views
Amavis outbound mail filter for Postfix?
Running Postfix on Ubuntu 22.04, I'd like to make sure all outgoing mail originating from the server (eg mail forms on websites and stuff) is filtered for spam and malware. I'm using Amavis, which is ...
1
vote
2
answers
253
views
Email message headers pass SPF check after failing earlier SPF checks. Will this result in spam?
I have an issue where email is being marked as spam by Gmail/Google Apps systems.
When reading the mail headers, the most recent SPF check in the mail chain passes, but earlier checks fail. That is, ...
0
votes
2
answers
466
views
Spammers slipping through SPF
One of the subscribers on the mailhost I run has been receiving scads of spam mail "from himself." With SPF set up and validated on the domain (wickenburg.us) this should not be happening. ...
0
votes
1
answer
300
views
Where can i find explanation of a SpamAssasin scores like SPOOFED_FREEMAIL?
I can define custom scores for SpamAssasin, default one seems to be zero and it makes me wonder if i should raise it, but before doing so, where can i find detailed information on how these particular ...
0
votes
0
answers
24
views
Server still sending spam despite closing relay with postfix [duplicate]
I have an Ubuntu 20.04.5 LTS with multiple Wordpress website running on Nginx.
I installed postfix and configured it to stop relaying emails.
I have an antivirus freshclam running.
Someone or ...
0
votes
0
answers
71
views
Multi-message anti-SPAM filter in SpamAssassin
My vendor's database has been stolen and I started to receive spam messages in a huge amount. It is being sent by spambots / spam scripts, so sender and recipient email addresses are always fake. The ...
0
votes
0
answers
166
views
In Postfix, how do I block all clients whose reverse DNS is in a domain?
I just got hit by a spammer sending spam through my mail server from multiple IP addresses in various netblocks all with a reverse lookup ending in googleusercontent.com. (I haven't figured out how; ...
0
votes
1
answer
198
views
How to make a mail server spam "proof"
I work for a German company that sends several thousand emails to our customers every day. Our employees send their emails via Microsoft 356, but the system does not use a mail server and sends emails ...
0
votes
1
answer
564
views
Spamassassin not scoring correctly
I have Spamassassin running on a Ubuntu/Plesk server. It was working relatively well until recently but now seems to be letting through random spam messages.
These messages seem to trigger plenty of ...
3
votes
2
answers
508
views
Changing hostname for the purpose of email delivery
I have email delivery issues, and MXtoolbox says "Reverse DNS is not a Valid Hostname". I have A and AAAA records for domain.com and mail.domain.com. The data center has set up reverse DNS ...
1
vote
0
answers
128
views
Include matching rspamd rules in mail headers
Spamassassin has a feature to include the matching rules in the headers of mails flagged as spam, so one can see why the mail was classified as spam and possibly adjust or create mailbox filters that ...
0
votes
0
answers
133
views
Fail2Ban redirect instead of drop
I'm trying to configure Fail2ban to redirect instead of banning, I've found plenty of posts about redirecting to a different port for HTTP traffic to display a different webpage, but I need to ...
1
vote
1
answer
185
views
"Non-Open-Mail Relay" Postfix / Dovecot are relaying anyway; Mis-configured or CRACKED? Plus, presently blocked external users need access too
CRITICAL UPDATE
While working on this, there'd been no spam relayed for over a single day so I left it up and overnight, TWO emails got relayed! ACK!
Here they are, from my tail / grep commands (...
-1
votes
1
answer
35
views
Long established Postfix / Dovecot environ had to be rebuilt, became an open relay; How do I know fore sure it's fixed, and, if not, fix it fast?
Because it's bad form here to ask multiple questions in ONE entry, I'll be asking about specific Postfix and Dovecot entries, however this nightmare has been going on since about January 19 and it's ...
0
votes
2
answers
668
views
How to disable the default RBLs used by rspamd?
I'd like to use an RBL in rspamd without using all the preconfigured RBLs, but it seems that the configuration in /etc/rspamd/local.d/rbl.conf can only add new lists, not remove the default ones.
The ...
1
vote
0
answers
58
views
Server getting spam requests by the same IP address opening Apple App Store
I have a simple docker-containerized nginx application. I'm getting spammed with requests when I view the nginx logs via docker-compose logs -f webserver (this is thousands of lines but I'm leaving ...
0
votes
1
answer
134
views
How to improve sender score for personal mail server
Background:
I have an own domain and an own mail server that sends out the mail for this domain. The users are only my family so there are less than 10 users with probably 20 mails sent per day.
...
0
votes
1
answer
592
views
spamassassin and subject utf base64
I have a problem with some spam messages with the subject field encoded in utf8 base 64 and weird characters used to fool the filter rules
example:
raw subject of incoming email
Subject: =?UTF-8?B?...
0
votes
1
answer
43
views
Increase in spams through website contact forms after change of server
I recently moved my website from Hostgator to an Amazon Web Services' EC2 instance. From a few days later people/bot started posting spam messages in the forms that are on the website.
Is there ...
0
votes
0
answers
39
views
Rule - Check for an email with an image tag
I hate spammers phising emails, it doesn't contain anything but an image
with in the body.
I'm wondering if there is a rule, I can check if the email body contains only and only <img> and no ...
0
votes
0
answers
477
views
Sendgrid IP Address Consistently Blocked on RATS-Spam
Overview
For our application, we use SendGrid to send emails to many of our users. Recently over the past few weeks, our SendGrid IP addresses have been added to the RATS-Spam blacklist multiple times....
0
votes
1
answer
509
views
Completely block any outgoing emails
I have a server with Postfix, running in Docker. The server is supposed to only receive emails, not send them.
I added the following iptables rules to try to block anything getting out from port 25:
...
0
votes
1
answer
103
views
Managing SPF with multiple users on an email provider
I'm using Ipower for web and email hosting. I was recently made aware that SPF and DMARC were set to neutral, causing all of our outgoing emails to go to spam. I updated both records and they worked ...
1
vote
1
answer
3k
views
Spamhaus is blocking several customers since a couple of days?
I received a couple of complaints from customers that got their emails rejected.
I haven't changed my config, so this must be an issue with spamhaus.
I'm running Postfix with these settings for ...
0
votes
1
answer
778
views
Publishing Exchange Server public IP address in a hybrid Exchange setup?
I'm currently using the Hybrid Exchange Online and Exchange Server OnPremise setup.
I have included the IP addresses of all my Exchange Servers in the below TXT record, I wonder if it is really ...
2
votes
1
answer
4k
views
DMARC record is valid, but your domain's None/Quarantine policy does not yet protect it against email spoofing and phishing
People,
Using the website: https://easydmarc.com/tools/dmarc-lookup?domain=name.com
I got this error:
DMARC record is valid, but your domain's None/Quarantine policy does
not yet protect it against ...
7
votes
2
answers
1k
views
How can I create and update the existing SPF record to allow more than 10 entries?
How can I include another SPF record if my existing domain already has 10 lines of SPF records in the TXT record?
I wanted to add these two:
include:mailgun.org
include:sendgrid.net
This is my ...
0
votes
0
answers
210
views
Spam URL block not working with Cloudflare
Quite confused...
Apache Access Log is constanmtly showing spam URLs being called after a Wordpress website hack. I think I have removed the hacking, but something is still calling these spam URLs on ...
0
votes
1
answer
153
views
Postfix - Eliminate sender domain based on recipient email address
Does anyone know of a way, using Postfix, to block a domain as soon as it tries to send to a specific recipient address?
Spam typically goes to several recipients in my organization. Some email ...
0
votes
0
answers
544
views
DKIM: validation error: error:RSA_padding_check_PKCS1_type_1:invalid padding
We receive a lot of spam on our servers from 3rd party servers and often this spam includes the email header such as:
DKIM: validation error: error:0407008A:rsa routines:...
1
vote
1
answer
509
views
Local Mail Transport Protocol (LMTP) spam?
Our sever receives a fair bit of spam, most of this is standard spam but looking at the headers of some spam we get directly it seems to show that the mail is received by the LMTP (Local Mail ...
0
votes
1
answer
798
views
How to prevent 3rd party domains using our server/domains for email envelopes
We recently received a whole bunch of notification emails stating an email that apparently originated from our servers was blocked for being spam, but we can't find the source emails on our server, so ...
1
vote
0
answers
314
views
Some of my emails do not get to clients without a warning
I send emails from the web interface of Gmail Workspace (business email). Most of the clients receive my letters just fine. But some of the clients only receive messages with text and images.
Messages ...
0
votes
2
answers
2k
views
How to prevent unauthorized relay of mail in Postfix
It seems that our mail server is being used to send spam.
The sender of the email is a spoofed real account on our server.
There is no email in the sent history for that account.
I would like to ...
4
votes
1
answer
1k
views
Reject emails that fail reverse hostname resolution
My Postfix server is receiving spam from an ever changing set of domain names but with a consistent pattern in the log file starting with line warning: hostname X does not resolve to address Y. No ...
0
votes
2
answers
5k
views
Why did this incoming email get through Office 365 spam filters with a DKIM fail? What policy do I need to "tune"?
We use Office 365 mail, I got this spam email this morning so I checked the header to see if there was anything I could do. Here is the header with our receipt domain removed
Received: from ...
-1
votes
1
answer
2k
views
How to fix spam listing of IP due to SMTP HELO banner
Spamhaus has listed my IP a few times for an apparent problem. They are indicating:
A device using <ipv6 addr> is infected with malware and is emitting spam.
<ipv6 addr> is making SMTP ...
0
votes
1
answer
282
views
procmail rewrite subject line if email recipient user fails match test
I have a local procmail user "bob".
If an email arrives and matches [email protected], then no action should be taken.
However, if an email arrives and is [anything_else]@domain.com then I ...
0
votes
0
answers
219
views
GMail Sends Email from .uk.net Domains to Spam
Gmail always puts emails from domains ending with .uk.net into spam, despite SPF, DMARC, and DKIM being passed.
If we send emails from other domains, e.g. ending with .co.uk, from the same mail server ...
2
votes
1
answer
2k
views
Exchange 365 Spam Filter Policy Block Domain TLD
We migrated to cloud from on premise Exchange 2010. In Sonicwall ESA, I was able to block TLDs (Top Level Domains). In the Exchange Admin Center, I see I can set individual or additional "Rules&...
0
votes
1
answer
37
views
SPAM after activating WordPress plugin on Linux VPS
After activating a plugin I received an email that I had never recived before. What kind of miscellaneous code it might be? it's a coincidence? I received an email to my account Gmail that I never ...