Questions tagged [spam]
Unsolicited e-mail, comments or posts, often sent out in large volumes; possibly but not necessarily commercial in nature
1,375
questions
0
votes
0
answers
19
views
DKIM: validation error: error:RSA_padding_check_PKCS1_type_1:invalid padding
We receive a lot of spam on our servers from 3rd party servers and often this spam includes the email header such as:
DKIM: validation error: error:0407008A:rsa routines:...
- 207
0
votes
1
answer
28
views
Local Mail Transport Protocol (LMTP) spam?
Our sever receives a fair bit of spam, most of this is standard spam but looking at the headers of some spam we get directly it seems to show that the mail is received by the LMTP (Local Mail ...
- 207
0
votes
1
answer
48
views
How to prevent 3rd party domains using our server/domains for email envelopes
We recently received a whole bunch of notification emails stating an email that apparently originated from our servers was blocked for being spam, but we can't find the source emails on our server, so ...
- 207
1
vote
0
answers
53
views
Some of my emails do not get to clients without a warning
I send emails from the web interface of Gmail Workspace (business email). Most of the clients receive my letters just fine. But some of the clients only receive messages with text and images.
Messages ...
- 111
0
votes
1
answer
26
views
Figure out how an email was sent through Exchange 2013 [closed]
we had a spam issue the last day and found this in our message tracking log.
At the moment I don't how to figure out, if this mail was sent via OWA or SMTP and if the attacker had credentials or not.
...
- 1
0
votes
2
answers
52
views
How to prevent unauthorized relay of mail in Postfix
It seems that our mail server is being used to send spam.
The sender of the email is a spoofed real account on our server.
There is no email in the sent history for that account.
I would like to ...
- 3
3
votes
1
answer
495
views
Reject emails that fail reverse hostname resolution
My Postfix server is receiving spam from an ever changing set of domain names but with a consistent pattern in the log file starting with line warning: hostname X does not resolve to address Y. No ...
- 133
0
votes
2
answers
223
views
Why did this incoming email get through Office 365 spam filters with a DKIM fail? What policy do I need to "tune"?
We use Office 365 mail, I got this spam email this morning so I checked the header to see if there was anything I could do. Here is the header with our receipt domain removed
Received: from ...
- 233
-2
votes
1
answer
46
views
How to fix spam listing of IP due to SMTP HELO banner
Spamhaus has listed my IP a few times for an apparent problem. They are indicating:
A device using <ipv6 addr> is infected with malware and is emitting spam.
<ipv6 addr> is making SMTP ...
- 139
0
votes
0
answers
43
views
How do i found a barracuda custom spam rule: BSF_SC0_TG035b META: Custom Rule TG035b
For some reason we get delivered to the spambox at the providers outlook & hotmail. The reason we see in the deliverability report are the following rules:
BSF_SC0_TG035b META: Adjusted rule ...
0
votes
1
answer
37
views
procmail rewrite subject line if email recipient user fails match test
I have a local procmail user "bob".
If an email arrives and matches bob@domain.com, then no action should be taken.
However, if an email arrives and is [anything_else]@domain.com then I ...
- 199
0
votes
0
answers
13
views
How to configure Postfix to return enhanced response code
I'd like to return by Postfix 550 5.1.1 for some specific domains. I followed the manual and created the access file, with a single row:
baddomain.com 550 5.1.1
The 550 is returned, but instead of 5.1....
0
votes
0
answers
47
views
GMail Sends Email from .uk.net Domains to Spam
Gmail always puts emails from domains ending with .uk.net into spam, despite SPF, DMARC, and DKIM being passed.
If we send emails from other domains, e.g. ending with .co.uk, from the same mail server ...
- 101
1
vote
1
answer
70
views
Exchange 365 Spam Filter Policy Block Domain TLD
We migrated to cloud from on premise Exchange 2010. In Sonicwall ESA, I was able to block TLDs (Top Level Domains). In the Exchange Admin Center, I see I can set individual or additional "Rules&...
- 15
0
votes
1
answer
14
views
SPAM after activating WordPress plugin on Linux VPS
After activating a plugin I received an email that I had never recived before. What kind of miscellaneous code it might be? it's a coincidence? I received an email to my account Gmail that I never ...
- 1
0
votes
0
answers
16
views
Get Folder Statistic and create a CSV of that
i currently having a problem creating a automatic Script that get the Mails from a specific Folder and pastes them in a CSV.
We have an AntiSpam Mailbox with 2 Folders in it. One that Stores the Spam ...
- 1
0
votes
1
answer
137
views
Can't Receive Email - Postfix iRedMail Server Using Spamhaus & Unbound / BIND9 DNS Servers
iRedMail server configured using ISP's DNS servers. Running several years without issue. Moving from current ISP to Starlink. It appears Starlink uses Cloudflare's public DNS. Currently have both ISPs ...
- 1
0
votes
0
answers
72
views
Individual and global spam filter using Dovecot/rspamd
I'm runnig email server using Postfix, Dovecot, RoundCube and rspamd on Debian 11. Like everyone I have to deal with spam, but I got high demands for that.
Currently my rspamd is checking every ...
- 1
0
votes
0
answers
63
views
DNS lookup spam running up Route 53 bill
Throughout 21 we saw around 15M DNS queries/month. In January 2022 we saw almost 300M and I didn't notice.... then February almost 1 BILLION...... and I noticed because of the bill. Amazon isn't ...
- 1
0
votes
0
answers
23
views
How to solve spam email receiving issues on gmail?
In my google workspace account, we have a recent issue with receiving emails. Some of our external emails are coming into the spam folder.
I have no idea what might cause this and would like some ...
1
vote
2
answers
54
views
How to block spoofed mail from *.host.com
I'm currently running a centOS server with directadmin and custombuild.
I keep getting spoofed phishing mails with spoofed from addresses that have SPF setup properly.
Spamassassin gives it a score 1....
- 131
0
votes
1
answer
37
views
Privacy-friendly Postfix bounce messages for remote rejects
The topic of handling bounce message for remote rejects has been brought up at least three times (1, 2, 3), and it looks as if there is no real solution. I wonder, though, if the bounce template can ...
- 239
-1
votes
1
answer
88
views
How do I remove my domain from spam lists after abused credential incident?
Recently the email account of one of my users was hijacked to send a lot of spam and phishing mails. Once I realized the problem I did solve it, but only after my domain was marked as spammer by many ...
- 1
1
vote
0
answers
51
views
spamassasin unable to read Japanese when it is html encoded
I would like to block some emails which contains certain Japanese words, but spamassassin fails to detect such words when the email is HTML encoded, for example:
This is a multi-part message in MIME ...
- 466
0
votes
1
answer
331
views
Send email from Heroku server using gmail account and PHPMailer
I have a Heroku app which has a php script that send out an email. The email sent always goes to spam.
Let's say the heroku app is mywebsite.herokuapp.com and my email is mywebsite@gmail.com. Based on ...
- 1
0
votes
1
answer
66
views
Confused about SPF Records
I thought that ?all in SPF should not be used.
Then I examinated SPF records of some local email provider companies and I found this:
v=spf1 mx ip4:77.75.78.0/23 ip4:77.75.76.0/23 ip6:2a02:598::/32 ?...
0
votes
0
answers
47
views
Do email providers junk all email from certain IP address ranges?
TLDR: Outlook.com appear to be junking all our emails from new VPS - nothing has an effect so questioning if IP address range reputation is the issue.
We used to host all our websites (five) and email ...
0
votes
0
answers
102
views
Postfix Maildrop Directory Generating Unsolicited Email
I have recently set up up a Postfix Mail Server on Ubuntu 20.04. This server is used mainly to relay messages from authenticated users to the outside world. This is so applications such as payroll ...
0
votes
0
answers
57
views
SpamAssassin attach report to mail
I've set up a Postfix mail server with SpamAssassin and spamass-milter for SPAM detection. Everyhting so far seems to work well. My mails are getting tagged as SPAM within the subject and are ...
- 101
1
vote
2
answers
226
views
What exactly can I conclude from "High scoring spam message has been dropped (in reply to end of DATA command)"?
I operate a web site that offers user registrations. Users get automatic registration success e-mails, sent through a professional e-mail hosting company (not directly from our own server). This has ...
- 143
0
votes
1
answer
75
views
Google putting all mail to spam
This question is related to some software for schools and one part is for the schools to send information to students and parents. But all mail end up in Gmail spam folders.
If i look at the google ...
- 115
0
votes
0
answers
36
views
How to route/forward a specific email account from one Email Provider through Microsoft O365 Exchange Servers
My company has around 10 custom domain email accounts that were included our website's hosting plan. Our website sends out at least 300 emails a day in response to customer's requesting quotes for our ...
- 1
3
votes
0
answers
735
views
systemd-udevd spams systemd-udevd[1523120]: veth20996a5: Failed to get link config: No such device
I have setup my server logging with graylog and now I see that my logs are being spamed by level: 3 errors like these:
systemd-udevd[1523120]: veth20996a5: Failed to get link config: No such device
I ...
- 131
1
vote
0
answers
51
views
Continuous SPAM from certain IP/s hosting provider, how to report them if not responding at abuse@company.mail
last maybe 4 weeks is coming SPAM e-mails from various domains. In common is that when i paste the source code of the e-mail to
https://www.spamcop.net
is detected this provider and their mailbox: ...
- 377
1
vote
1
answer
44
views
Outbound email restriction
We have a project to set up around 5,000 plus email IDs for an educational institution. Emails are meant mostly for receiving mails, and the instituition wants to set up some rule that no email id can ...
- 675
1
vote
1
answer
57
views
After adding a new DNSBL to Sendmail, how can I resubmit an email to see if it will be rejected?
TL;DR
How can I fool my own sendmail into thinking an email comes from a particular ip address, so that it rejects the message due to a DNSBL match?
Details:
I run my own mail server, and most spam is ...
- 51
0
votes
3
answers
82
views
Tag External Emails from NEW external addresses
We work with a giant company that prepends an email tag to every externally originating (to them) email that goes something like:
"Warning, this email originated outside your organization - don't ...
0
votes
0
answers
216
views
DMARC, DKIM, or SPF? Emails going into quarantine
I have never had to deal with DKIM, DMARC, or SPF records before; however, our SPF record is full (10, Cloudflare) and I have a vendor whose emails aren’t making it to our mailboxes.
I made ...
- 1
0
votes
1
answer
259
views
How to stop spammer spoofing my domain for emails
I've scanned all my code and even changed the passwords to my google apps account such that the SMTP password has changed. However, spammers are still sending emails from June24-eBay-USA-contactmsg-...
- 302
0
votes
1
answer
96
views
Postfix identify the true sender
Recently my server has many spam emails generated. I looked for information in an example message but the sender is apparently faked, and there is no postfix user ID in the message header as well. ...
- 15
1
vote
1
answer
130
views
How to minimize chances of one's domain being falsely blacklisted (uribl)
My side job is to admin my wife's company domain. It's only used as a domain name for Google mail and tools (slides, docs, etc...).
Although she used her domain for email for many years without any ...
- 113
0
votes
0
answers
47
views
E-mail servers keep being blacklisted by Spamhaus
We are running a (webbased) application that is being used by many companies. This application generates large volumes of e-mail, almost all of them have a PDF attachment. These are e-mails the users ...
- 113
1
vote
0
answers
2k
views
Mail loop between spam filter and 365
I was wondering if anyone has seen this before. We have our own spam filter cluster that emails go through before being sent on to 365. When emailing from our company domain (365 hosted) to another ...
- 11
0
votes
1
answer
128
views
Postfix: Optimising order of spam checks?
I have a mail server (postfix v3.3) on a VPS running Ubuntu 18.04, processing both inbound and outbound mail (I have some websites sending mail, and some SASL auth users with accounts on the machine) ...
- 390
5
votes
1
answer
379
views
How to match Japanese in spamassassin?
I live in Japan. Recently there has been a lot of spam coming from China with messages written in Chinese. As spamassassin does not contain rules for Chinese, most of those emails pass with low score.
...
- 466
3
votes
1
answer
365
views
Why does rspamd consider an odd number of URIs in an email to be an indicator of spam?
Rspamd has many email spam heuristics, and one of them is URI_COUNT_ODD. This heuristic seems to just count how many URIs are in the body of the email, and adds 1 to the score if the number is odd. ...
- 139
0
votes
2
answers
232
views
Configure Postfix external relay for UCEPROTECTL3 rejection
Is it possible to configure MTA Postfix server to bypass UCEPROTECTL3 rejection ?
Example when my server connect to recipient server then I get information:
Diagnostic-Code: smtp; 554 5.7.1 You are ...
- 41
0
votes
1
answer
116
views
What to do if a specific postfix/dovecot user's account is hacked and being used to send spam?
I'm running a postfix/dovecot mail server. This morning, I discovered it was unresponsive. Turned out, /var/log was full. It appears one of the users has had their account hacked and it's being used ...
- 369
1
vote
0
answers
111
views
Google Postmaster: IP reputation of subdomain and main domain identical
We have a main domain, example.com. We use this to send regular emails via Google GSuite.
We also have a subdomain, say sub1.example.com. We use this to send campaign emails through an email marketing ...
- 111
0
votes
0
answers
137
views
DKIM validation fails only on Outlook
I'm configuring OpenDKIM to sign miltiple domains with the same key on Pstfix. I followed this tutorial with s=mail and d=example.com.
SigningTable:
* mail._domainkey.example.com
KeyTable:
...
- 11