100ds Of Incoming Spam Per Minute
Sep 12, 2007We are recieving 100ds spam emails per minute, which is causing for server load, as well email delay. Please help us how could we fix it
Its Plesk server
RH EL 3
ADVERTISEMENT
Incoming Spam & High Server Load
Dec 17, 2007I'm having problems with incoming spam on my dedicated server the load average of the server is around 80 or 100.2 I know it's incoming spam because when I check the exim process I see a lot of ips from russia, germany, taiwan then I block that ips with the /etc/apf/apf -d ip command and then the load of the server drops down to 7 or less, so the cuestion is how can I detect and block the spammers ips automatically on the server? I have spam assassin running and blocks the spam emails right, the real problem is the high load generated for spamd application and all the incoming connections of the spammers ips on the server.
Server specifications:
Cent OS 4
Control panel: directadmin
Dual-Core AMD Opteron(tm) Processor 2214 HE
1GB RAM
Exim 4.68
Apache 1.3.39
MySQL 5.0.37
vm-Pop3d 1.1.7f-DA-2
Cron Job :: Run Script Every Second, Of Every Minute, Of Every Day
Jun 13, 2009Say I have a script... /home/user/public_html/script.php
I want to run this script every second, of every minute, of every day.
How would I do this? I want to set up a cron and run it, I have written a cron and I am running it in shell as I type, but if I close shell the cron exits, can anybody assist me with making a cron run this script every second permanently.
CSF ( High 5 Minute Load Average )
Nov 6, 2009i`m using csf + lfd on the server ( CentOS / Cpanel )
i have received the notification from my root user regarding the "High 5 minute load average "
i have just checked my apache but couldn`t find any problem , everything is normal , But what`s the notification for ?
Note : The email included 3 files ( Apache status files )
Time: Sat Nov 7 00:34:48 2009 +0330
1 Min Load Avg: 8.28
5 Min Load Avg: 8.26
15 Min Load Avg: 8.26
Running/Total Processes: 11/171
Per Minute In Exim Mail Queue
Dec 18, 2007I get dozens of these per minute in exim mail queue
Quote:
1J4neJ-0001DS-Ns-H
mailnull 47 12
<>
1198027383 0
-ident mailnull
-received_protocol local
-body_linecount 33
-max_received_linelength 115
-allow_unqualified_recipient
-allow_unqualified_sender
-localerror
XX
1
root@server.mydomain.com
154P Received: from mailnull by server.mydomain.com with local (Exim 4.68)
id 1J4neJ-0001DS-Ns
for root@server.mydomain.com; Tue, 18 Dec 2007 19:23:03 -0600
038 X-Failed-Recipients: admin@domain.com
029 Auto-Submitted: auto-replied
063F From: Mail Delivery System <Mailer-Daemon@server.mydomain.com>
029T To: root@server.mydomain.com
059 Subject: Mail delivery failed: returning message to sender
052I Message-Id: <E1J4neJ-0001DS-Ns@server.mydomain.com>
038 Date: Tue, 18 Dec 2007 19:23:03 -0600
1J4neJ-0001DS-Ns-D
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
admin@domain.com
SMTP error from remote mail server after RCPT TO:<admin@domain.com>:
host sentry.domainbank.com [64.85.73.28]: 553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)
------ This is a copy of the message, including all the headers. ------
Return-path: <root@server.mydomain.com>
Received: from root by server.mydomain.com with local (Exim 4.68)
(envelope-from <root@server.mydomain.com>)
id 1J4neI-0001D9-4I
for admin@domain.com; Tue, 18 Dec 2007 19:23:02 -0600
To: admin@domain.com
Subject: Services(2) failed
From: monitor@domain.com
Message-Id: <E1J4neI-0001D9-4I@server.mydomain.com>
Date: Tue, 18 Dec 2007 19:23:02 -0600
Address:mydomain.com
Following services are down:
SSH(22)
MySQL(3306)
Do not reply to this!
For further details please contact your provider!
Then I get this also
Quote:
1J4nhC-0001Kn-2T-H
root 0 0
<root@server.mydomain.com>
1198027562 0
-ident root
-received_protocol local
-body_linecount 13
-max_received_linelength 77
-auth_id root
-auth_sender root@server.mydomain.com
-allow_unqualified_recipient
-allow_unqualified_sender
-local
XX
1
root@server.mydomain.com
194P Received: from root by server.mydomain.com with local (Exim 4.68)
(envelope-from <root@server.mydomain.com>)
id 1J4nhC-0001Kn-2T
for root@server.mydomain.com; Tue, 18 Dec 2007 19:26:02 -0600
025* From: root (Cron Daemon)
045F From: root@server.mydomain.com (Cron Daemon)
009* To: root
029T To: root@server.mydomain.com
077 Subject: Cron <root@server> lynx --dump [url]
028 X-Cron-Env: <SHELL=/bin/sh>
025 X-Cron-Env: <HOME=/root>
033 X-Cron-Env: <PATH=/usr/bin:/bin>
027 X-Cron-Env: <LOGNAME=root>
024 X-Cron-Env: <USER=root>
052I Message-Id: <E1J4nhC-0001Kn-2T@server.mydomain.com>
038 Date: Tue, 18 Dec 2007 19:26:02 -0600
1J4nhC-0001Kn-2T-D
Not Found
The requested URL /agent/cron.php was not found on this server.
Additionally, a 404 Not Found error was encountered while trying to use an
ErrorDocument to handle the request.
_________________________________________________________________
Apache/2.2.6 (Unix) mod_ssl/2.2.6 OpenSSL/0.9.7a mod_auth_passthrough/2.1
mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_jk/1.2.25 PHP/5.2.5 Server at
mydomain.com Port 80
Lfd: High 5 Minute Load Average Alert - 6.37
Mar 21, 2008I use CSF on a VPS with 512 RAM and 1024 Busrt and the other day I received the below notification. My hostsaid it was Mailman and since I don't use mailing lists the recommendationwas to disable it. So I did. I'm curious tho as to why this happened in the first place.
Time: Wed Mar 19 17:53:33 2008
1 Min Load Avg: 11.41
5 Min Load Avg: 6.37
15 Min Load Avg: 2.70
Running/Total Processes: 12/94 ...............
Plesk 12.x / Linux :: Executing Cronjob Every Minute
Apr 18, 2015A customer want to execute a cronjob in plesk every minute, but the cronjob was only executed every 5 minutes...
(so that the cronjob was executed every minute...)
Plesk 12.x / Linux :: Admin Account Get Logged Out After A Minute
Feb 26, 2015I'm running Plesk 12.0.18 Update #36 on CentOS 6.6 and when I log in, after just a minute of inactivity or so I get logged out.
The period of inactivity is set to 60 minutes, so that shouldn't be the problem.
Plesk 12.x / Linux :: Increase Rate Of Send Mail Per Minute
Oct 16, 2014How i can increase rate of send/minute for my campaigns of mail?
View 5 Replies View RelatedEmail Not Incoming
Nov 25, 2007when I tested from a different server to this one I get this output in the error log:
Quote:
2007-11-25 01:32:48 no IP address found for host 146.92.32.216.static.reverse.ltdomains.com (during SMTP connection from (host2.localserver.us) [216.32.92.146])
2007-11-25 01:32:48 failed to expand condition "${perl{democheck}}" for democheck router: Undefined subroutine &main::democheck called.
2007-11-25 01:32:48 failed to expand condition "${perl{checkbx_autowhitelist}{$authenticated_id}}" for boxtrapper_autowhitelist router: Undefined subroutine &main::checkbx_autowhitelist called.
2007-11-25 01:32:48 failed to expand condition "${perl{checkbx_deliver}{$domain}{$local_part}}" for virtual_boxtrapper_user router: Undefined subroutine &main::checkbx_deliver called.
2007-11-25 01:32:48 failed to expand condition "${perl{check_deliver}{$domain}{$local_part}}" for virtual_user router: Undefined subroutine &main::check_deliver called.
2007-11-25 01:32:48 failed to expand condition "${perl{democheck}}" for democheck router: Undefined subroutine &main::democheck called.
2007-11-25 01:32:48 failed to expand condition "${perl{checkbx_autowhitelist}{$authenticated_id}}" for boxtrapper_autowhitelist router: Undefined subroutine &main::checkbx_autowhitelist called.
2007-11-25 01:32:48 failed to expand condition "${perl{checkspam2}}" for checkspam2 router: Undefined subroutine &main::checkspam2 called.
2007-11-25 01:32:48 remote host address is the local host: host1.localserver.us (while verifying <ezhost@host1.localserver.us> from host (host2.localserver.us) [216.32.92.146])
2007-11-25 01:32:48 H=(host2.localserver.us) [216.32.92.146] F=<sales@levi1.net> temporarily rejected RCPT <sales@levi1.com>: remote host address is the local host
this has started about 36 hours ago for no apprent reason (maybe an automatic CPanel update?) and I am not receiving ANY email (from no other servers either).
I tried to uncheck the options in WHM "sender verify" and "use callouts" but I still get this same error, would anybody know what this issue is? and as a quick fix, how do I disable the "${perl{checkspam2}}" and "${perl{democheck}}"?
Economics Of Incoming Bandwidth
Jan 26, 2007It seems that colos usually have about a 10/1 ratio of outgoing/incoming bandwidth. Is about right?
How do colo providers typically pay for bandwidth? Do they usually have a huge excess of incoming bandwidth capacity? What would be a fair % of the outgoing price to pay for the incoming, assuming I had the opposite ratio of traffic?
Clearing Incoming Mail Queue
Nov 4, 2009I had this spam problem on my server. Some perl scripts uploaded to /tmp folder were generating lots of spam email. We stopped sendmail, cleaned the server from all the bugs and erased all the messages in /var/spool/mqueue. Yet when I start sendmail again I begin receiving lots of autoresponders and returned emails. Where are those incoming mails located? In which queue?
View 3 Replies View RelatedIncoming / Outgoing Packets Blocked
Jun 22, 2009I am facing very unique issue at two of my servers hosted at hivelocity from last 3 or 4 months.
In every couple of days all incoming and outgoing activity get stopped except on port 3386 (RDP) i.e. no one can get website hosted on the server or neither I can access any website from the server but all other services continue to work. A reboot to the server will solve the issue but that is only a temp solution.
I have checked event logs one by one but no issue or error found on it. I have even run the server without firewall but still it stops working.
Scanned the server from 3 different antiviruses one by one but they didn't found any virus.
Datacenter tech staff monitored the server and found no DoS or other such kind of attack on the server or IP.
I am totally clueless on this issue on how to solve it.... anybody here who can help me?
OS: Windows 2003
Firewall: Previous hardware based, then software based and now windows firewall (same issue with all)
Third party softwares: No
Scripts: ASP, ASP.NET, PHP
Database: SQL and MySQL
No other software installed on the server
Handling Incoming Email Messages
Nov 12, 2008i'm wanting my users to be able to upload pictures to their accounts via email by sending the picture to a central email address (pics@mysite.com, for example).
from there, i'd like to take that incoming email and parse it how i see fit. (matching the email address to the user account, inserting the subject as the photo title, etc...)
what's the best method of handling this?
How To Block All Exim Incoming Mail
Feb 24, 2008problem with incoming spam to my server. Causing high load that eventually take down the server.
Since I don't use the server for my mail (I use Gmail), can anyone let me know the easiest way to stop/block all incoming mails to the server? I still need outgoing mail, though. Some of my PHP forms need it.
Right now, I stopped Exim to save the server (if it runs, load can get to 900+).
Servers Bandwidth - Incoming/outgoing
Jun 23, 2008I was wondering what the difference is between incoming and outgoing bandwidth. I noticed some server providers have these types of limitations.
Does incoming mean uploading and out going is downloading bandwidth usage?
Postfix And Catching Incoming Mail
Dec 11, 2007write a script which will run a script on every incoming mail, the script must touch a file in /var/log/mail - filename must be a login on server... thats all
i found something to use procmail, but i dont know how to bite it
how to do that? would be nice if you drop some links or tutorials..
always i hate mail servers!
Extremely High Incoming Traffic
Dec 2, 2007We've found out a abnormal usage of one of our servers, our RTG graphs shows:
Last 24h
IfInOctets: 30.5GB
MAX: 6.9MBits/s
AVG: 3.4Mbits/s
Cur: 4.7Mbits/s
And a strage traffic:
IfOutOctets: 42.5GB
MAX: 76.6MBits/s
AVG: 4.7Mbits/s
Cur: 600Kbits/s
We are running two websites on this server, and we looked at raw log apache, we've compilers disabled, we block most of outgoing / incoming packets on firewall, we ran chkrootkit, rkhunter and nothing was found. We checked for cronjobs, suspect files, netstat, but we can't see anything strange. We use the latest server software (apache 2.2.x), PHP 5.2.x, MySQL 4.1.x, we have most of the server optimized.
We are running iptraf now, and it seems normal:
Да Incoming rates: 85.8 kbytes/sec
Да Outgoing rates: 636.4 kbytes/sec
Anyone have an idea? And some way to properly monitor incoming traffic? I'm looking to find how/where is the source of this traffic.
Server Box Incoming Connectivity Issue!! (keyweb.de)
Oct 17, 2007I ordered yesterday, and got it today! But I have the box, 100 MB unmetered line, I downloaded utorrent, donloaded a file at 10 MB/per sec, but For some reason the box wont seed, and the tiny little yellow banner on the bottom says there are no incoming connections (this is usually green if your port is open) It wont seed... the DL is great, is there a box setting that is blocking this? there is no installed firewall, and the ports are all open....
View 1 Replies View RelatedIP Based Virtual Hosts (Incoming HTTP)
Jul 31, 2007I have set up IP-Based Virtual Hosts, as I have been requested to set it up for SSL.
I have successfully set up all redirects and routes using the IFCONFIG and ROUTE.
My query is this, I have noticed that each HTTP request actually has to come in through the Virtual IP address (which is assigned to each site) from outside. Else it just displays the default host. Does this mean I have to have a separate phone line and router for each web-site I wish to host?
I am using Apache on Fedora Core 6.
3rd Party Mailserver Rejects Incoming Mail
Sep 28, 2007We switched to a 3rd party mail server provided by our local ISP, however when attempts are made to mail anyone on our domain a message similar to one of the following is received:
Quote:
This is an automatically generated Delivery Status Notification
Delivery to the following recipient failed permanently:
my_email_address@our_domain
Technical details of permanent failure:
PERM_FAILURE: SMTP Error (state 13): 550 5.7.1 <my_email_address@our_domain>... Relaying denied
or
Quote:
Hi. This is the qmail-send program.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<my_email_address@our_domain>:
70.43.63.21 does not like recipient.
Remote host said: 550 5.7.1 <my_email_address@our_domain>... Relaying denied Giving up on 70.43.63.21.
I've made sure the MX records are in place on our nameserver, and I've verified this with DNS Stuff.
I seem to think the problem is on our ISP's end.
Plesk 12.x / Linux :: Allow Incoming Emails Only From One IP Address?
Apr 21, 2015On my plesk server, i have several emails account. These email addresses should receive only emails send by a specific server. But for now, they can receive any email, including spam.
So, i would like to block all emails that are not coming from the allowed server.
How can i do this in plesk ? As i am not a very good server admin, can you tell me exactly what i need to do in plesk?
Plesk 11.x / Windows :: Move Spam To Spam Folder Not Available?
Oct 17, 2013Microsoft Windows Server 2008 R2 Service Pack 1
Panel version 11.0.9 Update #59, last updated at Oct 3, 2013 02:06 AM
MailEnable version 5
I see in the plesk documentation that the screen to enable SPAM filtering for an individual there is an option to "Move spam to the Spam folder". I don't see that option so I am wondering if it is only available on some versions of Plesk, or in combination with certain mail servers. How to make that option available?
Mailbox Allowance? My Incoming Emails Have Stopped Coming In
Sep 3, 2008But with my current host, my incoming e-mails have stopped and have done quite a lot of times, If I send an e-mail to myself from another acount, it gets bounced back.
When I'm searching for hosts, I can't see any info on mailbox allowance.
I'm using Outlook to download all my e-mails.
I don't know why they are stopping and I can't find out from the person who got the host from me, in the past he said something about me having to delete e-mails. But this would come back to mailbox space which no hosts seem to advertise, unless it goes under webs space.
If my mailbox is full or ran out of space, does anybody have any recommendations for a host that offers a good amount of mailbox space.
Another question, am I limited to the amount of e-mails I can send with some hosts? I'll be sending out Newsletters to 600+ people each month.
Plesk 12.x / Linux :: Server Firewall / FTP - Allow All Incoming Connections
Jun 18, 2014Since the update I have a problem with my Firewall. I need to set "Allow all incoming connections" under "Server => Firewall" in order to connect over FTP with TLS (explicit). This was working before the update without allowing all incoming connections. How to fix this in the Plesk panel?
View 2 Replies View Related