Questions tagged [spam]
Unsolicited e-mail, comments or posts, often sent out in large volumes; possibly but not necessarily commercial in nature
1,397
questions
-2
votes
1
answer
52
views
Spam filters: IP address with no history v. good history [closed]
Zoho gave me an IP address with no history this week. Senderscore.org says there's insufficient data to evaluate it. At other times Zoho has assigned me an email sending IP with a fair or good score.
...
- 1
0
votes
1
answer
42
views
Amavis outbound mail filter for Postfix?
Running Postfix on Ubuntu 22.04, I'd like to make sure all outgoing mail originating from the server (eg mail forms on websites and stuff) is filtered for spam and malware. I'm using Amavis, which is ...
- 471
1
vote
2
answers
93
views
Email message headers pass SPF check after failing earlier SPF checks. Will this result in spam?
I have an issue where email is being marked as spam by Gmail/Google Apps systems.
When reading the mail headers, the most recent SPF check in the mail chain passes, but earlier checks fail. That is, ...
- 121
0
votes
2
answers
340
views
Spammers slipping through SPF
One of the subscribers on the mailhost I run has been receiving scads of spam mail "from himself." With SPF set up and validated on the domain (wickenburg.us) this should not be happening. ...
0
votes
1
answer
166
views
Where can i find explanation of a SpamAssasin scores like SPOOFED_FREEMAIL?
I can define custom scores for SpamAssasin, default one seems to be zero and it makes me wonder if i should raise it, but before doing so, where can i find detailed information on how these particular ...
- 466
0
votes
0
answers
24
views
Server still sending spam despite closing relay with postfix [duplicate]
I have an Ubuntu 20.04.5 LTS with multiple Wordpress website running on Nginx.
I installed postfix and configured it to stop relaying emails.
I have an antivirus freshclam running.
Someone or ...
- 101
0
votes
0
answers
68
views
Multi-message anti-SPAM filter in SpamAssassin
My vendor's database has been stolen and I started to receive spam messages in a huge amount. It is being sent by spambots / spam scripts, so sender and recipient email addresses are always fake. The ...
- 163
0
votes
0
answers
126
views
In Postfix, how do I block all clients whose reverse DNS is in a domain?
I just got hit by a spammer sending spam through my mail server from multiple IP addresses in various netblocks all with a reverse lookup ending in googleusercontent.com. (I haven't figured out how; ...
- 101
0
votes
0
answers
176
views
Using spamassassin + dovecot/postfix, how do you block messages from a blacklisted address instead of route to junk folder?
I have set up an email server using a wizard tool, although I was hoping to alter the default behavior configuration such that when I receive emails from addresses I explicitly blacklist, those ...
- 113
0
votes
1
answer
131
views
How to make a mail server spam "proof"
I work for a German company that sends several thousand emails to our customers every day. Our employees send their emails via Microsoft 356, but the system does not use a mail server and sends emails ...
- 5
0
votes
1
answer
418
views
Spamassassin not scoring correctly
I have Spamassassin running on a Ubuntu/Plesk server. It was working relatively well until recently but now seems to be letting through random spam messages.
These messages seem to trigger plenty of ...
3
votes
2
answers
285
views
Changing hostname for the purpose of email delivery
I have email delivery issues, and MXtoolbox says "Reverse DNS is not a Valid Hostname". I have A and AAAA records for domain.com and mail.domain.com. The data center has set up reverse DNS ...
- 147
1
vote
0
answers
101
views
Include matching rspamd rules in mail headers
Spamassassin has a feature to include the matching rules in the headers of mails flagged as spam, so one can see why the mail was classified as spam and possibly adjust or create mailbox filters that ...
- 1,683
0
votes
0
answers
118
views
Fail2Ban redirect instead of drop
I'm trying to configure Fail2ban to redirect instead of banning, I've found plenty of posts about redirecting to a different port for HTTP traffic to display a different webpage, but I need to ...
1
vote
1
answer
166
views
"Non-Open-Mail Relay" Postfix / Dovecot are relaying anyway; Mis-configured or CRACKED? Plus, presently blocked external users need access too
CRITICAL UPDATE
While working on this, there'd been no spam relayed for over a single day so I left it up and overnight, TWO emails got relayed! ACK!
Here they are, from my tail / grep commands (...
- 1,242
-1
votes
1
answer
35
views
Long established Postfix / Dovecot environ had to be rebuilt, became an open relay; How do I know fore sure it's fixed, and, if not, fix it fast?
Because it's bad form here to ask multiple questions in ONE entry, I'll be asking about specific Postfix and Dovecot entries, however this nightmare has been going on since about January 19 and it's ...
- 1,242
0
votes
2
answers
504
views
How to disable the default RBLs used by rspamd?
I'd like to use an RBL in rspamd without using all the preconfigured RBLs, but it seems that the configuration in /etc/rspamd/local.d/rbl.conf can only add new lists, not remove the default ones.
The ...
- 1,683
1
vote
0
answers
47
views
Server getting spam requests by the same IP address opening Apple App Store
I have a simple docker-containerized nginx application. I'm getting spammed with requests when I view the nginx logs via docker-compose logs -f webserver (this is thousands of lines but I'm leaving ...
- 11
0
votes
1
answer
100
views
How to improve sender score for personal mail server
Background:
I have an own domain and an own mail server that sends out the mail for this domain. The users are only my family so there are less than 10 users with probably 20 mails sent per day.
...
- 1,013
0
votes
1
answer
481
views
spamassassin and subject utf base64
I have a problem with some spam messages with the subject field encoded in utf8 base 64 and weird characters used to fool the filter rules
example:
raw subject of incoming email
Subject: =?UTF-8?B?...
- 61
0
votes
1
answer
36
views
Increase in spams through website contact forms after change of server
I recently moved my website from Hostgator to an Amazon Web Services' EC2 instance. From a few days later people/bot started posting spam messages in the forms that are on the website.
Is there ...
0
votes
0
answers
32
views
Rule - Check for an email with an image tag
I hate spammers phising emails, it doesn't contain anything but an image
with in the body.
I'm wondering if there is a rule, I can check if the email body contains only and only <img> and no ...
- 191
0
votes
0
answers
437
views
Sendgrid IP Address Consistently Blocked on RATS-Spam
Overview
For our application, we use SendGrid to send emails to many of our users. Recently over the past few weeks, our SendGrid IP addresses have been added to the RATS-Spam blacklist multiple times....
- 1
0
votes
1
answer
379
views
Completely block any outgoing emails
I have a server with Postfix, running in Docker. The server is supposed to only receive emails, not send them.
I added the following iptables rules to try to block anything getting out from port 25:
...
- 103
0
votes
1
answer
90
views
Managing SPF with multiple users on an email provider
I'm using Ipower for web and email hosting. I was recently made aware that SPF and DMARC were set to neutral, causing all of our outgoing emails to go to spam. I updated both records and they worked ...
- 9
1
vote
1
answer
2k
views
Spamhaus is blocking several customers since a couple of days?
I received a couple of complaints from customers that got their emails rejected.
I haven't changed my config, so this must be an issue with spamhaus.
I'm running Postfix with these settings for ...
- 343
0
votes
1
answer
682
views
Publishing Exchange Server public IP address in a hybrid Exchange setup?
I'm currently using the Hybrid Exchange Online and Exchange Server OnPremise setup.
I have included the IP addresses of all my Exchange Servers in the below TXT record, I wonder if it is really ...
- 1,295
2
votes
1
answer
4k
views
DMARC record is valid, but your domain's None/Quarantine policy does not yet protect it against email spoofing and phishing
People,
Using the website: https://easydmarc.com/tools/dmarc-lookup?domain=name.com
I got this error:
DMARC record is valid, but your domain's None/Quarantine policy does
not yet protect it against ...
- 1,295
7
votes
2
answers
1k
views
How can I create and update the existing SPF record to allow more than 10 entries?
How can I include another SPF record if my existing domain already has 10 lines of SPF records in the TXT record?
I wanted to add these two:
include:mailgun.org
include:sendgrid.net
This is my ...
- 1,295
0
votes
0
answers
193
views
Spam URL block not working with Cloudflare
Quite confused...
Apache Access Log is constanmtly showing spam URLs being called after a Wordpress website hack. I think I have removed the hacking, but something is still calling these spam URLs on ...
- 153
0
votes
1
answer
137
views
Postfix - Eliminate sender domain based on recipient email address
Does anyone know of a way, using Postfix, to block a domain as soon as it tries to send to a specific recipient address?
Spam typically goes to several recipients in my organization. Some email ...
- 155
0
votes
0
answers
483
views
DKIM: validation error: error:RSA_padding_check_PKCS1_type_1:invalid padding
We receive a lot of spam on our servers from 3rd party servers and often this spam includes the email header such as:
DKIM: validation error: error:0407008A:rsa routines:...
- 219
1
vote
1
answer
407
views
Local Mail Transport Protocol (LMTP) spam?
Our sever receives a fair bit of spam, most of this is standard spam but looking at the headers of some spam we get directly it seems to show that the mail is received by the LMTP (Local Mail ...
- 219
0
votes
1
answer
596
views
How to prevent 3rd party domains using our server/domains for email envelopes
We recently received a whole bunch of notification emails stating an email that apparently originated from our servers was blocked for being spam, but we can't find the source emails on our server, so ...
- 219
1
vote
0
answers
300
views
Some of my emails do not get to clients without a warning
I send emails from the web interface of Gmail Workspace (business email). Most of the clients receive my letters just fine. But some of the clients only receive messages with text and images.
Messages ...
- 111
0
votes
2
answers
1k
views
How to prevent unauthorized relay of mail in Postfix
It seems that our mail server is being used to send spam.
The sender of the email is a spoofed real account on our server.
There is no email in the sent history for that account.
I would like to ...
- 3
4
votes
1
answer
1k
views
Reject emails that fail reverse hostname resolution
My Postfix server is receiving spam from an ever changing set of domain names but with a consistent pattern in the log file starting with line warning: hostname X does not resolve to address Y. No ...
- 155
0
votes
2
answers
5k
views
Why did this incoming email get through Office 365 spam filters with a DKIM fail? What policy do I need to "tune"?
We use Office 365 mail, I got this spam email this morning so I checked the header to see if there was anything I could do. Here is the header with our receipt domain removed
Received: from ...
- 298
-1
votes
1
answer
1k
views
How to fix spam listing of IP due to SMTP HELO banner
Spamhaus has listed my IP a few times for an apparent problem. They are indicating:
A device using <ipv6 addr> is infected with malware and is emitting spam.
<ipv6 addr> is making SMTP ...
- 169
0
votes
1
answer
235
views
procmail rewrite subject line if email recipient user fails match test
I have a local procmail user "bob".
If an email arrives and matches [email protected], then no action should be taken.
However, if an email arrives and is [anything_else]@domain.com then I ...
- 209
0
votes
0
answers
201
views
GMail Sends Email from .uk.net Domains to Spam
Gmail always puts emails from domains ending with .uk.net into spam, despite SPF, DMARC, and DKIM being passed.
If we send emails from other domains, e.g. ending with .co.uk, from the same mail server ...
- 101
2
votes
1
answer
1k
views
Exchange 365 Spam Filter Policy Block Domain TLD
We migrated to cloud from on premise Exchange 2010. In Sonicwall ESA, I was able to block TLDs (Top Level Domains). In the Exchange Admin Center, I see I can set individual or additional "Rules&...
- 25
0
votes
1
answer
31
views
SPAM after activating WordPress plugin on Linux VPS
After activating a plugin I received an email that I had never recived before. What kind of miscellaneous code it might be? it's a coincidence? I received an email to my account Gmail that I never ...
- 1
1
vote
1
answer
582
views
Can't Receive Email - Postfix iRedMail Server Using Spamhaus & Unbound / BIND9 DNS Servers
iRedMail server configured using ISP's DNS servers. Running several years without issue. Moving from current ISP to Starlink. It appears Starlink uses Cloudflare's public DNS. Currently have both ISPs ...
- 11
0
votes
0
answers
149
views
DNS lookup spam running up Route 53 bill
Throughout 21 we saw around 15M DNS queries/month. In January 2022 we saw almost 300M and I didn't notice.... then February almost 1 BILLION...... and I noticed because of the bill. Amazon isn't ...
- 1
1
vote
2
answers
236
views
How to block spoofed mail from *.host.com
I'm currently running a centOS server with directadmin and custombuild.
I keep getting spoofed phishing mails with spoofed from addresses that have SPF setup properly.
Spamassassin gives it a score 1....
- 131
1
vote
1
answer
150
views
Privacy-friendly Postfix bounce messages for remote rejects
The topic of handling bounce message for remote rejects has been brought up at least three times (1, 2, 3), and it looks as if there is no real solution. I wonder, though, if the bounce template can ...
- 257
-1
votes
1
answer
417
views
How do I remove my domain from spam lists after abused credential incident?
Recently the email account of one of my users was hijacked to send a lot of spam and phishing mails. Once I realized the problem I did solve it, but only after my domain was marked as spammer by many ...
- 1
1
vote
0
answers
105
views
spamassasin unable to read Japanese when it is html encoded
I would like to block some emails which contains certain Japanese words, but spamassassin fails to detect such words when the email is HTML encoded, for example:
This is a multi-part message in MIME ...
- 469
0
votes
1
answer
751
views
Send email from Heroku server using gmail account and PHPMailer
I have a Heroku app which has a php script that send out an email. The email sent always goes to spam.
Let's say the heroku app is mywebsite.herokuapp.com and my email is [email protected]. Based on ...
- 101