Capture Outgoing Email
Apr 2, 2009I have exim, smartermail and qmail servers running in my fleet. Which is the easiest to capture outgoing emails for a specific account and how can I do it?
View 0 Replies
ADVERTISEMENT
Capture Email Sent Though Exim
Jun 1, 2007Is there anyway to capture emails sent using SMPT with exim? I need to find a way to monitor outbound email traffic, along with the subject, message, etc.
View 1 Replies View RelatedOutgoing Email Problems, Particularly With Yahoo!
Dec 8, 2006We've recently had a lot of complaints from clients who say Yahoo! mail recipients are not receiving the emails they send. We first noticed this sometime November 2006 but it could have started earlier.
One solution would be to find another hosting provider. The problem is I suspect that it's happening to a lot of hosts and it's Yahoo! in particular that seems to have been a lot more stringent than they were in the past.
I remember some time back (2004 or 2005), AOL blocked an EHOSTPROS.COM server (SVR28) for over 6 months. We also had SVR75 with them and it wasn't blocked (I believe they were in the same DC). And AOL was notorious for blocking a lot of servers. I don't know how it is with them now because from the Philippines, there is very little email exchange with AOL.COM or AIM.COM accounts.
And there is a lot of emails going to YAHOO.COM accounts! And that's where the problem lies.
I first noticed it on my ResellerZoom reseller account (GRAY). Mails from GRAY accounts were completely blocked off by Yahoo! It didn't even go to the Bulk Folder. So Yahoo! was blocking the GRAY server's mail IP and not particular domains (I don't think blocking a domain makes any sense, you usually block IP's).
I opened a ticket with RZ and got great support. But of course, it was about 3 days before Yahoo! started accepting mails from GRAY. RZ did the best they can but could only have done so much.
And then the same thing happened with my HostGator reseller account (INFINITI). Similar issue as well.
From that time until today, it seems to come back on and off. Sometimes emails never reach Yahoo!, sometimes it lands in the Bulk Folder (that's a much lesser evil).
I have 3 reseller accounts at RZ (CAMERON B1, GRAY A1, R2 Failover-1) and 2 reseller accounts at HG (INFINITI and SONOMA). The same issue has come back again the past couple of days on INFINITI (HostGator) and GRAY (ResellerZoom). I'd open a ticket but it's on and off.
Dec 5 / Dec 6, several clients on INFINITI complained that emails to Yahoo! recipients were not being delivered. By the time we tested it, it was ok already. And then just a few hours ago, we got a call from a client on GRAY. We tested and emails were landing on the Bulk Folder. But after a couple of more tests, it went to the Inbox.
We advise clients to tell Yahoo! recipients to always check their Bulk Folders. We also ask the recipients to tag emails with MARK AS NOT SPAM hoping that would help.
You could say that I should be going to HG and RZ support for these. It's just that I don't think it's limited to them and I want to get feedback from others. I will also invite HG and RZ to give their comments on this post.
In the reseller hosting area, I'll actually be asking around also for reseller hosting that's more reliable with email. But I've been doing reseller hosting since May 2003 and have used all of the following:
EHOSTPROS.COM, HOSTDIME.COM, MIDPHASE.COM, SITE5.COM, BLIKSEMHOSTING.COM, HOSTGATOR.COM, RESELLERZOOM.COM
There were more in between but that was a quick in and out. The above list in the sequence I signed up and only includes those that I stayed with long enough (at least 6 months) to evaluate and decide if they're worth it.
I won't expound but avoid MIDPHASE, SITE5, and BLIKSEM. There's enough here on WHT for you to search upon.
My point is that, by far, I've had the best experience with HG and RZ and it does get tiring moving from one host to the other. And it's not that we haven't contributed to the problem. A lot of our clients' contact us forms have recently been hijacked by spammers and have caused abuse on the servers. We're working on fixing each and everyone of these scripts (> 80) and should solve it within a few days. We do our part but there are hundreds of accounts and millions of ways spammers try to hijack server resources for their cause. Note, however, that those scripts have been there for quite awhile and only recently have they been used to spam.
Although there are a lot of other hosts with good reps here on WHT, the only other host I am considering (for the moment) is Aussie Bob's DOTABLE.COM.
But then, right now, with these email woes, we're still evaluating our business. The bulk of our clients are dependent on email. Too much incoming spam is already an issue but mails not reaching intended recipients kinds of ruins the business.
Damned these spammers!
Is there actually a viable solution for this issue? Or is it something that we just have to start living with?
Outgoing Email Is Flagged As Spam
Mar 30, 2007A user in my server trying to send email, but email is flagged as "Absolute Spam" by Spamassassin. It says IP is listed in SBL/XBL.
There is an IP address in "Received-From" part of the headers. That IP is actually listed in several spam databases, but not my server's IP (Below, red and bold).
Email is sent from my server, but how come "From" IP is different from mine?
Headers of the email are below:
Quote:
Received: from [203.215.94.252] (helo=[10.0.0.7])
by server1.kanmonline-server101.net with esmtp (Exim 4.63)
(envelope-from <*********@sweetmail.org>)
id 1HQ3Yj-0007jV-6J
for ************@ezweb.ne.jp; Sun, 11 Mar 2007 00:32:37 +0900
Mime-Version: 1.0 (Apple Message framework v624)
In-Reply-To: <**********************@nm03imap01c.ezweb.ne.jp>
References: <**********************@nm03imap01c.ezweb.ne.jp>
Content-Type: text/plain; charset=ISO-2022-JP; delsp=yes; format=flowed
Message-Id: <98108bd45ea8b8bbd10cc7c35b6fad81@sweetmail.org>
Content-Transfer-Encoding: 7bit
From: =?ISO-2022-JP?B?GyRCOWI2NhsoQiAbJEIwITUqO1IbKEI=?= <**********@sweetmail.org>
Subject: Re:
Date: Sat, 10 Mar 2007 23:32:34 -0800
To: *********@ezweb.ne.jp
X-Mailer: Apple Mail (2.624)
Is The” Max Outgoing Email Per Domain” Feature Customizable
Mar 11, 2008if it is possible to customize this feature on cpanel. Is there a way to assign different limits to the domains on a cpanel server?
View 0 Replies View RelatedEmail - Host Only Allow POP3 On Outgoing Mail
Oct 29, 2008I bought a shared hosting account, specifically for my own personal email account. I wanted to use IMAP obviously, but the host only allow IMAP on incoming mail... And Pop3 on outgoing.
Is this a problem? What will this mean I cannot do?
And secondly, if anyone has a blackberry, will this style work with a new blackberry?
Plesk 12.x / Linux :: Limiting Outgoing Email Messages
Aug 1, 2014Since upgrading to Plesk 12 I am experiencing a strange bug:
When enabling the limitation of outgoing email messages, is not possible to RECEIVE emails to a account that is only redirecting the email messages (to a different account which also lies on the server).
I reproduced this behavior on two different servers from which one is a complete reinstall.
The maillog will then show the following error when receiving mails to a redirecting address:
Aug 1 04:04:34 xxxxxx plesk sendmail[16709]: handlers_stderr: DATA REPLY:554:5.7.0 The message could not be sent. You are not allowed to use sendmail utility.#012REJECT
Aug 1 04:04:34 xxxxxx plesk sendmail[16709]: REJECT during call 'limit-out' handler
I can find very few information on this error message, but when disabling the limiting feature, everything works as expected.
Plesk 12.x / Windows :: Outgoing Email Limitation Option Not Available In 12.0.18?
Sep 22, 2014We are facing issue with option " Switch on limitations on outgoing email messages", after the plesk upgrade to 12.0.18. Please find our license details
=============================
Key number PLSK.02868019.0004
Next license key update Oct 21, 2014
User accounts (resellers and customers) Unlimited
Domains Unlimited
Mail accounts Unlimited
Web users Unlimited
Language packs 1
[Code] .....
Plesk 12.x / Linux :: Mail Server Outgoing Email Error In Settings
May 26, 2014Since 12.0.18, when I go to Tools & Settings > Mail Server, I get this error message on the page:
"Error: The limits on outgoing mail will not work for the subscriptions that have IP addresses from the white list. To make the limits work, remove IP addresses from the mail server's white list".
However, the whitelist page just contains 127.0.0.0/8 and ::1/128, and all my subscriptions have an external IP address which is clearly not in the whitelist.
Plesk 12.x / Linux :: SMTP Outgoing Email Error Webmail And Outlook
Jul 16, 2014I have just install on a new server plesk 12.0.18 Update #7 on centos 6.5 final.Added new hosting for the domain on a dedicated IP. All works fine (website, incoming mails etc) apart from outgoing mails.Both webmail (roundcube) and other mail software (outlook 2010, 2013 , android phone etc) outgoing mail i can't get to work.
I have attached screen from webmail with SMTP error (250) : Authentication failed..With Outlook it will allow me to set up account, test account setting... it say all all complete if i don't set secure connection (SSL)/requires authentication. But when you try sending mails you get the error: Your message did not reach some or all of the intended recipients.
Subject:test
Sent:16/07/2014 15:13
The following recipient(s) cannot be reached:
'x@xxx.com' on 16/07/2014 15:13
Server error: '554 5.7.1 <x@xxx.com>: Relay access denied'
When you set the outgoing requires authentication/ advance SSL you get:Send test e-mail message: None of the authentication methods supported by this client are supported by your server.I have tried changing to some outgoing ports to no avail.
How To Capture Client Ip Address
Dec 28, 2005i am using tomcat server and am running a web application. I am trying to capture the clients ipaddress who ever are accessing my server. i used the method request.getRemoteAddr() .but i see always 127.0.0.1 instead of the clients ip address.i tried accessing my server from different machines having different ip address but my logs show me 127.0.0.1.
i guess something is wrong with my tomcat configuration.
Plesk 12.x / Linux :: Outgoing Mail Control Limit Email Message Incorrect
Jun 17, 2014The Outgoing Mail Control feature is working fine. One missing option with this feature is to view the contents of blocked messages. Unfortunately, sometimes a site gets hacked and is sending spam. which are over the message sending limit, to try to find out where the message came from.
The current problem is that the email message contents of the limitation warning with subject "Attempts to exceed outgoing limits for domains, mail boxes and subscriptions." is not correct. Somehow it only contains the text: date.timezone = "Europe/Amsterdam" (which is a PHP setting) instead of a descriptive message. I hoped it would contain the blocked message contents or some useful text. Can I change the contents of this message to the what is should be? And what should it be?
It looks like a problem I had ones before where the custom PHP settings at the hosting packages level and at the domains level where replaced with some other kind of settings string. But solved by just changing the custom PHP settings
Plesk 12.x / Linux :: Outgoing Mail Control Being Hijacked Mass Email Send Out
May 4, 2015I keep having certain domains being hijacked and mass emails being sent from them somehow. I've disabled mail within domain control panel for each domain and issue keeps occurring. I've limited # of emails as well to 2-5 per hour but now so many are trying to be sent from my server it is clogging up mail queue and I have to log into server via ssh and run postsuper -d ALL every day or two. It is very frustrating. The only way I can stop it is to disable domain in plesk panel but that is not an option.
What can I do to find the cause of this issue and stop it?
DDOS Packet Capture Files For Investigation
May 13, 2008Our network have been ddosed very heavily for the last 15 days.
These attacks are relatively small 50 - 100 mbits at most but in very very high PPS rate.My firewall counts 10Billion packets in a single hour of an attack period.
We are dealing with these attacks with a combination of freebsd pf transparent bridge firewalls and mostly null routing.
I were able to capture some packets from different attacks from last week and today.
After deeply checking these attack capture files I can see that our attack comes from several thousands different spoofed Ip addresses but always the same mac address in their packet headers.So I thought if this attack is coming to us from a single machine rather than hundreds of different zombie servers.
I don't have a clue how to trace back this attack and find the real ip address behind. My upstream provider also don't have enough knowledge to help me.
So after todays attack I thought about sharing my capture files during attack and hope that someone here will help me. And show me a way to trace back these attacks.
Outgoing Mail
Mar 20, 2007we the mail send through email client, the receiver checks local ISP's ip address or mail server IP address before it blocks the emails? Or does it check both IPs?
View 2 Replies View RelatedLog Outgoing Traffic
Apr 2, 2007An ad-network requires my website to have certain amount of traffic for x days to qualify, but they won't provide stats and have asked me to log the stats myself.
For incoming traffic stats, I already use AWstats etc, but is there anything available for logging outgoing traffic as well?
Outgoing Mail
May 28, 2007I installed and configured the POP3 and SMTP servers in windows IIS and set them up to auth using standard auth and windows usernames for the account groomi and admin.
I can receive incoming mail just fine, but when I try to send outgoing mail with the same credentials I get a 535-invalid logon error..
Checking Outgoing Mail
Feb 13, 2008Is there a way to track outgoing mail that's sent from a Linux server? I'm running on Fedora 8 now, and would like to confirm and check mail that's being sent out by a PHP application.
View 4 Replies View RelatedChange Outgoing IP Addresses
May 14, 2009I;m running a cPanel server on CentOS5 and I have multiple IP's
I want to change the IP address that outgoing traffic will use by default and make that change permanent.
How To Change Outgoing HELO
Jun 30, 2009Problem: I am using to my Centos/Exim/Cpanel server to relay emails. The person who receives my email sees a helo that captures my ISP IP address and lastly the mail server for my domain along with its IP.
My ISP (Verizon) IP is constantly being flagged as a spam source by a variety of RBL's.
My domains have never sent spam and I only send a low volume of emails.
How can I remove my ISP helo IP address from being added to my outgoing email so that the only IP is the IP of domain sending the email?
Example Header:
Quote:
Received: from c-99-172-221-252.hlvd.va.verizon.net ([99.172.221.252]:3389 helo=[127.0.0.1]) <-- remove this part
by server.myserver.com with esmtpa (Exim 4.69)
(envelope-from <email@mydomain.com>)
id 1MLoYc-0004Ol-20
for friend@hotmail.com; Tue, 30 Jun 2009 21:24:18 -0400
Outgoing Socket Coneection
Jul 24, 2007In VPS WINDOWS machine does any of the providers offer outgoing socket connection for my apps.?
or is it restricted?
Understanding Spam Outgoing
Mar 25, 2007I'd like to seek help on how to read eximlog file. I saw the below inside eximlog. I'm wondering now because realemail@domain.com does not exist on this user emailaddress when I browse his cpanel. Now who is sending it? the only correct info is the pixelxl which is the user.
2007-03-25 14:49:41 1HVMXt-0000SV-7j => pixelxl <realemail@domain.com> F=<vsbqd@domain.com> R=localuser T=local_delivery S=2213
2007-03-25 14:49:41 1HVMXt-0000SV-7j Completed
Outgoing Spam Protection
Jan 28, 2007What are the best ways to block outgoing spam? Installing APF would help ful?
Any other idea for outgoing spam?
Filter Outgoing Messages
Apr 1, 2007I am on a DirectAdmin server, with root access. Exim mail server.
Is there any way to filter outgoing messages? Let's say if IP of client is listed in blacklist, they can not send out emails
Outgoing SMTP Filtering
Dec 24, 2007More out of curiosity than anything, I've been wondering if there are options for filtering outgoing SMTP. Not necessarily every single message, but a firewall-level tool to watch for a sudden burst in SMTP from one host, run some of the messages through SpamAssassin or the like, and trigger an alert if they rank highly for spam.
It seems like it's technologically possible, but I've never heard of anyone doing it, nor seen an actual implementation of it. Has anyone heard of this type of thing?
Block Outgoing Mail
May 28, 2007May I able to block outgoing mail server on any account.
I have root access and Cpanel Installed.
Limit Outgoing Messages (QMail)
Nov 9, 2009We've got a dedicated server at our company that hosts several sites and email accounts. Today I noticed that in the mail queue (from Plesk) we have like 5 or 6 messages from the same customer with around 400 destination addresses for EACH one. This would be like 2000-3000 emails to be sent. It isn't spam as it's some kind of newsletter.
I don't really know how the QMail server handles this, but it's been 5 hours since some of those messages entered the queue, and they are still there, so it seems that is having some difficulty.
I don't pretend to limit the amount of emails an user can send per minute or per hour, but I would like to know if there is any way of managing the queue like, lets say, send 50 message per minute. As far as I know, the mail queue right now (by default) starts sending the messages as they come, which means it could send 1000 in a few seconds if it can handle it.
I don't even know if this would be better or worse, meaning that maybe messages could get queued when the server could handle them, so some customers would see that emails are not working instantly as they do now. It also would be good if this tool (if exists) could report the current status of the queue, saturation, etc...
We're a bit worried because a couple of days ago we had some kind of attack and our server started sending hundreds of emails with fake sender and the CPU went overloaded and the mail queue was too big.
Incoming / Outgoing Packets Blocked
Jun 22, 2009I am facing very unique issue at two of my servers hosted at hivelocity from last 3 or 4 months.
In every couple of days all incoming and outgoing activity get stopped except on port 3386 (RDP) i.e. no one can get website hosted on the server or neither I can access any website from the server but all other services continue to work. A reboot to the server will solve the issue but that is only a temp solution.
I have checked event logs one by one but no issue or error found on it. I have even run the server without firewall but still it stops working.
Scanned the server from 3 different antiviruses one by one but they didn't found any virus.
Datacenter tech staff monitored the server and found no DoS or other such kind of attack on the server or IP.
I am totally clueless on this issue on how to solve it.... anybody here who can help me?
OS: Windows 2003
Firewall: Previous hardware based, then software based and now windows firewall (same issue with all)
Third party softwares: No
Scripts: ASP, ASP.NET, PHP
Database: SQL and MySQL
No other software installed on the server