Plesk 12.x / Linux :: How To Block All Emails Except From One IP
Dec 19, 2014
I use a spam protection service. It works as following : -My DNS are configured to point to a server (sever A) which is configured to filter spams. -If an email is not a spam, the first server send it to my mail server (server B).
But some spammers found a way to bypass the protection : They send directly their email to my mail server (server A). So, i want to allow only emails coming from the server A IP.
I am currently running a virtual server, and over the past couple days have had a number of brute attacks from Chinese and Indian based IP's which have been marked in my logs and trying to break in, this has pulled my websites down with the server load.
I am trying to, in the Firewall settings, add the IP's to a block list, however am unable to see where this can be configured.
I have the problem that the ip blocked "failban" too short (set findtime=1800).
The ip should be blocked for 30 minutes (the second time).
2015-03-23 22:24:59,779 fail2ban.filter [2807]: INFO Set maxRetry = 5 2015-03-23 22:24:59,780 fail2ban.filter [2807]: INFO Set findtime = 1800 2015-03-23 22:24:59,781 fail2ban.actions[2807]: INFO Set banTime = 600
I'm trying to use spamfilter to block mail from specific address, adding this e-mail to spamfilter in mail account settings, but it doesn't work. In logs I see:
spamc[13430]: skipped message, greater than max message size (256000 bytes).
I've seen a number of exploit attemps on the default website which I believe has come via direct access via ip address i.e http://xxx.xxx.xxx.xxx.I have tried to block with .htacess but it seems to be being ignore (possibly by parallels or nginx configuration).how I can block access to the default site to all but 127.0.0.1, server external ip and my ip?
Today I try to fit all FW rules to my need. After i blocked the traffic "allow other incoming traffic" in the Plesk FW i dont get folders listed via FTP. The FTP client connect to my server, but listing content times out. After allow other traffic the content get listed. The rule "Allow FTP connections" ist in all enabled all the time.
I am receiving around 7.000 emails from different sources with the subject “Undelivered Mail Returned to Sender” or similar.
It seems someone is using an alias to my email address to send huge amounts of spam. I have checked the mail queue in WHM and the emails are not there. I have turned on the SMTP Tweak in security center, but that doesn’t seem to work.
I have no idea if this person is using my server to send massive amounts of spam,
What I have noticed is that most emails return to msxf@mydomain.com so is there a way to block this?
We have several clients who use phplist for their opt-in lists. ATT and a few others are blocking emails. The main reason is because the email from the list (email@client.com) originates from comcast.net. ATT and others appear to block based upon that discrepancy.
Questions for anyone who works with phplist:
1) If the client simply sends from the comcast.net email (and not from email@client.com) and we allow this as a valid sending source in phplist, will this solve our problem?
2) We attempted to send via webmail, which would have trumped all issues, however because the clients are sending email which incorporates graphics in a template, webmail is a poor choice.
3) Is there another workaround that we are not seeing?
I have noticed that a customer's emails are banned by certain RBL/antispam filters even though they are sent using SMTP-Authentication through a non-banned SMTP server.
It seems that its ISP IP is blacklisted..... Is this normal?
I use CentOS 5.5, Plesk 12 and Atmail. When I log in to
webmail.example.com
by browser and send emails to others, my home computer IP is attached to emails as X-Origin. I even used Thunderbird to send emails and same issue happens.
How can I prevent Qmail or (Atmail) to add my home computer IP to X-Origin? I am even OK if the server IP is attached to emails rather than home IP.
I am using a Linux server together with Parallels v10.31 ... Unfortunately I get little or no real support from my host so and if I do it's cryptic.
I have been getting a large amount of emails from my server [hundreds daily]. I have attached a screen grab indicating type of email being sent. I have created only one cron job and that was to reset the RAM on a regular base.
Also is it safe to update to the latest version without a major disaster happening....
After updating our server from plesk 11.5.30 to 12.0.18, one of our subscribers is receiving duplicate emails, a varying number anywhere between 5-15 of the same message!
Running plesk 12.0.18 on a CentOS 6.4 Cloud Server
Started after last update 12.0.18 Update #44 (on CloudLinux): I can send mail wia created mailboxes, but sites can not send mail, contact forms say "Failed to send your message." maillog file also do not indicate sending any messages from domains. Wordpress restore password claims:
"The e-mail could not be sent. Possible reason: your host may have disabled the mail() function." php.ini is default: safe_mode = Off disable_functions = is empty
The issue about not sending mail from domains was - old versions of LVE anf CageFS are incompatible with latest plesk update, updating them caused all sites in Cagefs to throw error 500 with log string: "SecureLVE jail error Invalid regexps: no match for path to base home directory". It was fixed by changing cagefs.base.home.dirs regexp to the real sites folder location. Enabling cagefs back removed one of the files it shouldn't:
"Removed file /var/cagefs/81/xxx/etc/php.d/soap.ini" So be carefull to place necesssary files back. For now everything works. Click to expand... Click for original message
On my plesk server, i have several emails account. These email addresses should receive only emails send by a specific server. But for now, they can receive any email, including spam.
So, i would like to block all emails that are not coming from the allowed server.
How can i do this in plesk ? As i am not a very good server admin, can you tell me exactly what i need to do in plesk?
I just moved from DirectAdmin to Parallels Plesk and already love the interface. Much better than DA in my opinion.
Let's get to the problem:
When I make a new email account I can login to this account on webmail.domain.com (roundcube) and receive and send emails. Now when I want to use this account on Apple Mail i'm not sure which ports I need to use.
For the incoming mail server I use: 143 For the outgoing mail server I use: 587
Now when I look at my mailbox it gives me a warning sign. The outgoing mail server gives a green dot, but the incoming mail server gives me a red dot.
- So sending mails works. - And receiving mails don't work.
I am using IMAP and have enabled the SSL box. I don't know if i need to check this, because i'm not running on an SSL certificate.
Are the ports that i'm using right? And should I enable the SSL checkbox?
I am dealing with a situation which i cannot understand. I am running an website for a resort and occasionally i am sending e-mail stop the people who book villas using the website. By occasionally i mean last year i sent 2 e-mail campaigns with a proper spam score.
However, at this moment, even the e-mails that i receive from the website's contact form arrive as Junk into Gmail for example.
I have 2 Plesk server and I want move everything from old server to new server. I can move my site downloading via ftp but how can I move my email message to new server? when I creating backup with backup manager I think everything is backed up but when I trying to restore that backup on new server I am getting invalid signature error and email message was not moved (only account created)
Is their any way to moved email message automatically? I checked on /var/lib/psa/dump and I see their many backup files created like apache file, conf, info, logs, vhost ?
I have a hard problem with my VPS. I have postfix as mail server on plesk 12 under ubuntu 12.
I dont know why the outgoing mails of all my domains in my servers are getting spam in servers like gmail, yahoo, hotmail...
I'm using mxtoolbox to fix errors and warnings and finally fixed all of them, but my mails are still outgoing to spam.
In mxtoolbox actually I have no mail server errors / warning, u can see it with, for example, this one of my domains: [URL] ....
Headers:
This message is an automatic response from Port25's authentication verifier service at verifier.port25.com. The service allows email senders to perform a simple check of various sender authentication mechanisms. It is provided free of charge, in the hope that it is useful to the email community.
I had made the backups of subscription and of whole plesk too and migrate it to other server. It seems all to be fine, but I cannot send or receive emails In Tools & Settings -> Server-Wide Mail Settings - > Mail Queue I see all mails stored there. The IPs was changed yesterday, and now I can see that WHOIS Infos was chanfed too, the domains are online.
On old server I had no problem with sending of emails (post), it is stil on, because I had not by all domains changed the DNS-Records yet.