Plesk 11.x / Linux :: Postfix Server Sending Spam
Jul 24, 2014Somebody is sending spam from my postfix server.
How can I locate the domain causing the problem?
Somebody is sending spam from my postfix server.
How can I locate the domain causing the problem?
My postfix is sending huge amounts of e-mail that I was forced to stop postfix.
Even if I set relaying to closed, disable message submission and disable sendmail spam is still being send..
Outgoing mail control reports nothing at all, and if I check my server with online tools to be sure it is not relaying everything is reported fine.
I have a Plesk v12.0.18_build1200140606.15 os_CentOS 6 server. using postfix
And Lots of spam is send from my server.
I tried: [URL] .... but with no results.
on the moment the /var/log/maillog file is over 5,5GB
and the /var/log/maillog.processed is over 7,2GB and splitted into multiple .gz files
What can I do to find the source of the problem and stop it ?
we are in this situation:
OS: CentOS 6.5 (Final)
Plesk version: 12.0.18 Update #16, last updated at Sept 11, 2014 04:07 AM
PHP: 5.4.32
we created a new mailing list test1@domain.tld and we tried to send a message, as administrator, to the list and to the temporary users subscribed.But Mailman dones't send anything ! And we receive this error:
Sep 11 15:20:00 2014 (30314) All recipients refused: {'admin-mailinglist@domain.tld': (554, '5.7.1 <admin-mailinglist@domain.tld>: Relay access denied')}, msgid: <mailman.0.1410441595.30312.test1@domain.tld>
Sep 11 15:20:00 2014 (30314) delivery to admin-mailinglist@domain.tld failed with code 554: 5.7.1 <admin-mailinglist@domain.tld>: Relay access denied
Sep 11 15:20:00 2014 (30314) SMTP session failure: 550, 5.7.1 Command rejected, msgid: <mailman.2.1410441595.30312.test1@domain.tld>
All other services on this server seems to be ok, normail email sending, receiving, http... all right... but mailman no.
I have a hard problem with my VPS. I have postfix as mail server on plesk 12 under ubuntu 12.
I dont know why the outgoing mails of all my domains in my servers are getting spam in servers like gmail, yahoo, hotmail...
I'm using mxtoolbox to fix errors and warnings and finally fixed all of them, but my mails are still outgoing to spam.
In mxtoolbox actually I have no mail server errors / warning, u can see it with, for example, this one of my domains: [URL] ....
Headers:
This message is an automatic response from Port25's authentication verifier service at verifier.port25.com. The service allows email senders to perform a simple check of various sender authentication mechanisms. It is provided free of charge, in the hope that it is useful to the email community.
[Code] ....
I run a server and have ONLY problems if i am sending mails to domains hosted by google ...
OSUbuntu 12.04.5 LTS
Plesk version12.0.18 Update #24, last updated at Nov 20, 2014 06:32 AM
Here a little bit about my configuration:
a) I have set a Reverse DNS (xyz.mydomain1.com) - My hostname!
b) i run 4 domains on this server (mydomain1, mydomain2, mydomain3, mydomain4)
c) my DNS settings are made by myself in my Domain Provider account
d) i also set SPF records and i use Domain Keys
Everything works like a charm but following now the outputs with my problems:
Here is my postconf -n output:
Code:
root@shamu:/etc/postfix# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases, hash:/var/spool/postfix/plesk/aliases
append_dot_mydomain = no
[Code] ....
Now I sending a email from my domain2.tld and google rejects this email ...
My issue started ince a couple of months seemed to increase with update to Plesk 12.0 (though I can't guarantee it).I am using Centos 6.5, all updated. What happens is that postfix usage starts to increase without any apparent reason (during week-ends for example). Then postfix is not responding anymore.
Code:
top - 13:27:13 up 3 days, 18:44, 0 users, load average: 0.73, 0.33, 0.32
Tasks: 238 total, 2 running, 236 sleeping, 0 stopped, 0 zombie
Cpu(s): 0.3%us, 0.6%sy, 0.1%ni, 98.7%id, 0.3%wa, 0.0%hi, 0.0%si, 0.0%st
Mem: 32917292k total, 8982212k used, 23935080k free, 1899416k buffers
Swap: 1046520k total, 0k used, 1046520k free, 4905884k cached
[code]....
Plesk 11.5 Lunix
Centos 5.6
I am having problem sending email. Email from others came in but when sent from the server it does not arrived.
SMTP Server (Postfix) keep stopping...
I have a dedicated server with Linux. I have the following problem. Someone has hack my server and is sending illegal newsletters. My hosting sent me an abuse message and in the mailserver logfiles i see that is sending all the time.
View 2 Replies View Relatedactually i want to know is this sending this email by my smtp server?
Feb 23 14:49:36 nsxxxxxx /var/qmail/bin/relaylock[9836]: /var/qmail/bin/relaylock: mail from 187.5.81.179:51251 (187-5-81-179.bsaco701.dsl.brasiltelecom.net.br)
Feb 23 14:49:37 nsxxxxxx qmail-queue-handlers[9838]: Handlers Filter before-queue for qmail started ...
Feb 23 14:49:37 nsxxxxxx qmail-queue-handlers[9838]: from=Frederick59c@brasiltelecom.net.br
Feb 23 14:49:37 nsxxxxxx qmail-queue-handlers[9838]: to=info@xxxxxxxxxx.be
Feb 23 14:49:37 nsxxxxxx qmail-queue-handlers[9838]: handlers_stderr: SKIP
[code]....
When I send files to my through FTP, the server cuts connection and I get this message in messages log file
FAIL: ftp per_source_limit from xxx.xxx.xxx.xxx
xxx.... my IP
And I've observed the connection is closed and opened during the transfer.
I avoid disconnection adding per_source=unlimited in /etc/xinetd.d/ftp_psa
But I see this entry in the same message log
mod_delay/0.7: unable to open DelayTable '/var/proftpd.delay': No such file or directory
I currently have a dedicated server, Linux, with 1 website on it that is sending spam.
At first I thought it was someone spoofing my email address, however when I check my servers Email queue I can see the spam emails in there being sent.
My problem is that I have contacted my server provider and support for the scripts I'm running and everyone is saying its the other persons fault. My server provider is saying everything is up to date and it must be a software exploit on one of my scripts, and the support team from my software is saying its not them that its the server.
got a 2nd notice from my ISP complaining that spams are being sent from my dedicated box. Since the first notice, I had stopped all the mail-related services (sendmail, mailman, courier-imap), which means no emails will be sent out from this box. However, I still received the 2nd notice for spamming.
own dedicated box running CentOS 4.2 with Plesk 8.1. 1 site hosted on it.
concerns are
1. Is my box hacked in and hijacked to send out spam? If yes, how can I check for system integrity?
2. Based on the service status dump, is there something else I need to do in the meantime to stop the box from sending out spam?
3. If there's someone who willing to help out, I'm willing to pay a small amount (~$50, sorry I'm broke!) to fix the server and just kinda help me through the process.
Upon checking the mail logs, I find this
Code:
Jul 12 07:39:35 ns2 postfix/smtp[31739]: certificate verification failed for gmail-smtp-in.l.google.com[173.194.68.26]:25: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority
Jul 12 07:39:36 ns2 postfix/smtp[31739]: 2AC1222A0003: to=<aarontd207@gmail.com>, relay=gmail-smtp-in.l.google.com[173.194.68.26]:25, delay=2, delays=0.1/0/1.3/0.64, dsn=2.0.0, status=sent (250 2.0.0 OK 1405143576 q6si6606624qan.104 - gsmtp)
I'm having issue with mails stuck in queue and take days to send out. I'm looking for a command or script solution that puts a priority to particular message or domain so their message can be sent first.
Mail mta is Postfix running on BSD system.
I are running an Plesk 11.5 on a Ubuntu 12.04 machine. Since days i have problems where i see scripts of phishing sites and mailer scripts installed in the httpdocs directory of various domain.
How I can prevent that people outsiders install this scripts on the server? Where is the bug that allows this?
I would like each of my clients who have a dedicated IP address and an SSL certificate to be able to use their own domain name (and own certificate) when sending mail on ports 465 or 587. I have managed to change the default certificate used by Postfix to my own server's certificate, but I want users to use their OWN IP address and SSL certificate when sending, so this is not an option.
I have been able to update Dovecot to use a specific certificate for each IP address, but I can't seem to update Postfix. I was trying to follow these instructions but my postfix master.cf was quite different than the poster's file and I didn't succeed: [URL] ....
I know many people will simply say "it can't be done" or "just get the users to use the shared IP address", but I know there must be some workaround to make this work, even if it means manually updating the config file after every Plesk update. I'm even prepared (if possible) to have Plesk abandon management of Postfix and have me manage it manually, if that's even an option.
I can't send any mail from the server. I don't get any log information about errors. Postfix is installed on opensuse 13.1.
View 3 Replies View RelatedEach migration in the last years I'm running into this bug that Postfix wants to run on port 587 even though this is turned OFF in the Plesk Panel.
Sometimes it does this after some update.
Because another process is running on port 587 this means that postfix does not start and I have some downtime until I "repair" this.
"Repairing" means going into Plesk panel and turning ON SMTP-Auth.... Wait a moment for it to apply and then turning it OFF again....
This unwanted behaviour can be easily reproduced by having this option turned off in the Plesk panel and then running /usr/local/psa/admin/sbin/mchk --without-spam
This will end up in a non-running postfix if another process is already running on port 587.
This shouldn't be happening. Especially because I reported this behaviour years ago..
on a fresh debian 7 64bit openvz system we actually have a problem with the new plesk 12 feature of limiting outgoing mails.We migrated about 25 systems to plesk, this is the first that makes problems.If limiting outgoing mails is activated (i double-checked all possible checkboxes in plesk) a fresh mailbox gives us the following error while trying to send via smtp:
Aug 15 13:09:32 2d4 postfix/smtpd[8645]: connect from unknown[XX.XX.XX.XX]
Aug 15 13:09:32 2d4 postfix/smtpd[8645]: E9AF61C58851: client=unknown[XX.XX.XX.XX], sasl_method=PLAIN, sasl_username=XX@XXX.XX
Aug 15 13:09:32 2d4 greylisting filter[8651]: Starting greylisting filter...
Aug 15 13:09:32 2d4 /usr/lib/plesk-9.0/psa-pc-remote[8611]: handlers_stderr: SKIP
[code]....
After deactivating the feature all mail is sent without any problems. We use postfix + dovecot.
There are several big domains that frequently defer accepting mail from us causing long delays or rejections. Google, AOL, and Yahoo are examples. I'm considering trying the suggestions found in this online posting regarding rate limiting the sending of messages to those domains. In the below URL, please see the section titled "Different policies for different domains"...URL....
Would these changes be safe to make on a CentOS 6.4 server running Plesk 11.0.9 with Postfix 2.8.4? Would any special modifications for Plesk be necessary?
At this moment, all mail (no matter what domain) goes out straight to its destination. We want to send the mail trough a antispam firewall before it enters the internet.
What setting to change?
Reset postfix configuration in plesk 12? I have some misconfiguration on smtp banner and hostname so I prefer to reset all.
View 6 Replies View RelatedI am unable to switch from qmail to postfix via the control panel. It opens a new window that just hangs and never loads. While waiting for it to load, I see these 2 processes running..
root 25108 0.1 0.0 133972 20604 ? S 21:58 0:00 /var/cache/parallels_installer/parallels_installer_CentOS_6_x86_64 --service-mode=components --enable-xml-output --ssl-cert /usr/local/psa/admin/conf/httpsd.pem --branch release,stable --web-interface --with-ssl --disable-browser
root 25109 0.0 0.0 104952 3032 ? S 21:58 0:00 /var/cache/parallels_installer/parallels_installer_CentOS_6_x86_64 --service-mode=components --enable-xml-output --ssl-cert /usr/local/psa/admin/conf/httpsd.pem --branch release,stable --web-interface --with-ssl --disable-browser
But after waiting 20 minutes, the browser never loaded and the two proceses remain. So I killed both processes and removed /tmp/psa-installer.lock and started again. The same thing happened.
Is there a way to fix this? If not, is there an easy way to switch MTAs from the command line?
I've a problem with a server with Postfix. Emails (smtp) are refused by an operator because there is too many mail sent in a few moment.
With Qmail, we make this config :
1) we create file concurrencyremote
# vi /var/qmail/control/concurrencyremote
with the value 3
2) we restart Qmail and it's ok
With Postfix, we make that :
1) we modify the file /etc/postfix/main.cf
default_destination_concurrency_limit = 3
2) In /etc/postfix/transport :
wanadoo.com slow ;
wanadoo.fr slow ;
orange.fr slow ;
orange.com slow ;
laposte.net slow ;
.wanadoo.com slow ;
.wanadoo.fr slow ;
.orange.fr slow ;
.orange.com slow ;
3) After :
#postmap /etc/postfix/transport
4) In /etc/postfix/master.cf :
slow unix - - n - 5 smtp -o syslog_name=postfix-slow -o smtp_destination_concurrency_limit=3 -o slow_destination_rate_delay=1
5) In /etc/postfix/main.cf :
slow_destination_recipient_limit = 20
slow_destination_concurrency_limit = 3
And we modify :
transport_maps = hash:/var/spool/postfix/plesk/transport, hash:/etc/postfix/transport
6) At the end :
# /etc/init.d/postfix reload
But it doesn't work. Operator "Orange" refused emails.
In maillog, we have :
dsn=4.3.0, status=deferred (mail transport unavailable)
I just upgraded my Plesk 11.5 on Plesk version: 12.0.18 Update #9 , and after the upgrade the Postfix stop working. And forwarding, receiving is not working at all and I am getting message bellow.
OS: CentOS 6.5 (Final)
Plesk version: 12.0.18 Update #9
This is the mail system at host nsXXXXX.ovh.net.You can delete your own text from the attached returned message. mail system
<xyz@gmail.com>: Command rejected
Final-Recipient: rfc822; xyz@gmail.com
Action: failed
Status: 5.7.1
Diagnostic-Code: X-Postfix; Command rejected
after reinstalling the mta / postfix / smtp (because I couldn't send mails) my plesk is crashed.
I wanted to log in as admin but it doesn't accept my PW. Now with root and then it wants me to accept the license.
Now I copy all my /var/www/vhosts/ maybe when I do the setup steps in plesk it will overwrite all my website content... I hope not all plesk settings are away.
Why I pay every month money for a license? The trouble and work I have with Plesk..