Plesk 12.x / Linux :: Spam Filter Settings - White List Limit
Jul 24, 2014I can only add 100 addresses to the global address spam white list. I need to add more!
View 1 RepliesI can only add 100 addresses to the global address spam white list. I need to add more!
View 1 RepliesAlmost all mail adresses on my server is getting a spam mail from same mail marketing company everyday and i want to block them... Normally i just add the mail address to blacklist from "Spam Filter Settings" but this company is opening new addresses everyday and it is impossible to add all of them to blacklist so i need adding it as a regex to the blacklist...
The company i am talking about is opening mail addresses every day like below...
nrt150401@hotmail.com
nrt150402@gmail.com
nrt150403@yandex.com
nrt150404@mynet.com
As you can see all mail addresses begin with "nrt"+"6 digits of day"+"free mail provider", so right now i am using the regex below and it is already added to the blacklist but they are still able to send me... What can i do now?
We have see a interesting system from one competitors:
any user that have a email account receive any 24 hours a email report of all spam receive (as html attach)
In this html file there is list and flag and user can be indicate that is NOT a spam and click submit into html file that send information to mail server
May be interesting system
We use exim on ours server and horde as webmail..
I am happily running Plesk 11.5; with just one small but annoying persistent problem:
I have Clients with large mailinglistes
- SpamAssassin
- Server-wide greylisting
- DNSBL
is running.
But apparently many of the lists mail addresses have been harvested over the years. And as there is no easy way to use SA in mailman, I am down to greylisting only for list addresses.
This results in insanely large amounts of SPAM (-> moderation requests) on the client's lists. Is this behavior improved in Plesk 12?
Or can probably SIEVE filters work here - are those available to mailman? (probably not as they work in Dovecot?)
A few months before I updated to Plesk 12 I noticed a huge jump in uncaught spam - I hoped the update to Plesk 12 might solve this but no luck.
I have now changed the spam sensitivity on my account 1, the idea being I would then whitelist the domains I want to get through but literally nothing is getting marked as spam. Users on other domains on the same server are reporting the same.
I'm using the following blacklist database lists:
zen.spamhaus.org;dnsbl.dronebl.org;bl.spameatingmonkey.net;psbl.surriel.com;b.barracudacentral.org
I have Plesk SpamAssassin 3.3.2 installed and set as the Spam handler.
After the update to Plesk 12.0.18 only a white page appears in Roundcube. Unfortunately also reinstall did not remedy.
OS Debian 7.1
Plesk version 12.0.18 Update # 5, last updated at June 30, 2014 09:02 PM
Roundcube 1.0.0 [URL]
i registered some new domains and wanted to add them via Plesk. Before i did that i got the stanard Plesk default page saying that i have to add the domains via plesk as usual.
When i did that the domain switched to a white page and is not able to load .html pages, i can load a phpinfo.php or install wordpress etc. but when i try to load a simple .html file with css or something, i only get a whitepage..
i dont know why this is happening, other domains from december are working fine, new ones wont. the error.logs are empty and even after a whole server restart it wont work.I´m using Ubuntu 14.04 LTS Server 64bit + Plesk 12.0.18
switched to ipower.com and not getting any help - really stuck as my customer wanted better spam filtering so I went to them on a recommendation and I do not know how to turn on and what is the best setting for spam filtering with their panel. Also using HORDE where I can set a filter using rules but it only works if I log on and hit apply filter so my customer still gets it in his in box -
View 2 Replies View Relatedwhen im trying to enable spam filter for a particular email account i get this mysql error:
Error: SQLSTATE[23000]: Integrity constraint violation: 1062 Duplicate entry 'xxxx@domain.com' for key 3 (mail id i hid it for security reasons xxxx@domain.com)..
i searchd in the psa database but could not find any duplication...
I am not able to add a new filter to fail2ban
If I go in plesk panel to: Home > Tools & Settings >IP Address Banning > Jails > managing Filters > add filter > type in name & filtercontent and save I get "Information: The jail filter was added". But i can not see the new added filter in the Plesk Filter List (still just the 12 Filters in the list).
On the filesystem > /etc/fail2ban/filter.d/ i can see the new file but with the extension .local - usulay the file is named like xyz.conf
The output of /usr/local/psa/admin/sbin/f2bmng --get-filters-list
[["apache-auth", "fail2ban"], ["apache-badbots", "fail2ban"], ["apache-common", "fail2ban"],
["common", "fail2ban"], ["plesk-courierlogin", "plesk-fail2ban-configurator"],
["plesk-dovecot", "plesk-fail2ban-configurator"], ["plesk-horde", "plesk-fail2ban-configurator"],
["plesk-panel", "plesk-fail2ban-configurator"], ["plesk-qmail", "plesk-fail2ban-configurator"],
["plesk-roundcube", "plesk-fail2ban-configurator"], ["postfix-sasl", "fail2ban"],
["proftpd", "fail2ban"], ["recidive", "fail2ban"], ["sshd", "fail2ban"], ["test", null]]
test is the name i choosed for the new filter and it seems the second field has "null" .....
I want to create a Sieve filter for my email account using the Webmail interface of Horde.When I save a script at /ingo/basic.php?page=filters I get the following error message:Please note: My system language is German. See my translation of the German error messages within braces.
Code:
Skript nicht aktualisiert ("Script not updated"): exception 'Ingo_Exception' with message 'Beim Aktivieren des Skripts ist ein Fehler aufgetreten.
Fehlermeldung des Treibers ("Error while activating the script. Error message of the driver"): exception 'Ingo_Exception' with message
'Verbindungsaufbau abgelehnt' ("Connection refused") in /usr/share/psa-horde/ingo/lib/Transport/Timsieved.php:87
[code]...
Is there a way to modify / create Sieve filters without Horde?
I want to send a notification (by an email to SMS gateway) when a specific email arrives. I see that Roundcube has a sieve filter option called "Send Notification" and it has three input boxes which have no tooltips and I am unable to find any documents telling me what to fill in those boxes.
The boxes are:
Method
Options
Message
The Message is obvious enough, but the other two?
For the method, I tried mailto:<me@myemailaddress.com>
I left the options blank, typed in a short message and tried to save the filter, but it gave me an error message "Unable to save filter - server error occurred". Annoyingly, it then wiped out what I had typed and started me with a blank rule again. I also tried without the < and > round the email address.
Any clues as to proper syntax and what the options are?
Also, is it necessary to have another action after the Send Notification action to file the email away somewhere, or will it just be left in the inbox anyway if the only action is the notification?
I'm getting the following attempts every few minutes, I'd to put a stop to it with Fail2Ban but so far I've been unsuccessful. I get no IP bans in the Fail2Ban panel in Plesk 12.
Dec 3 23:24:14 XXX postfix/smtpd[2535]: warning: ca215.calcit.fastwebserver.de[146.0.42.84]: SASL LOGIN authentication failed: authentication failure
/etc/fail2ban/filter.d/sasl.conf
# Fail2Ban filter for postfix authentication failures
#
[INCLUDES]
[Code]....
Seems this started when upgrading to a version of 12. It was working a few days ago and only seems to affect mailing lists. I found a google Cached thread here where Igor was assisting some folks as late as Aug 4 and referenced this was "reported to development (PPP-10678 for your reference)" it seems the forums on Parallels changed or something because several Google links are not working and resulting in having to used cached results for the two links below.
I am able to disable SPF and the e-mails go through just fine however this was working with SPF enabled before a recent upgrade.
Page 1
[URL] ....
Page 2
[URL] ....
This is the error message displayed in /var/log/maillog
Sep 24 01:38:35 controlpanel postfix/smtpd[3725]: connect from localhost[127.0.0.1]
Sep 24 01:38:35 controlpanel postfix/smtpd[3725]: D565017C013E: client=localhost[127.0.0.1]
Sep 24 01:38:35 controlpanel greylisting filter[3899]: Starting greylisting filter...
[Code] ....
As a web host or ISP what do you think is best to do? do spam/virus filtering, or don't touch mail and let the user do what they want with it? (no chance of false positives, or lost mail, this way)
I work for an ISP and we have a barracuda and we get tons of calls from customers regarding lost mail and such as when you're filtering such a large varitey of mail its very hard to have a "perfect" filter. Mail that a car dealership gets and what a hospital get is totally different, for example.
Also in terms of web hosting the filtering will put a reasonable load on the server during peak spamming hours.
So just curious, as a ISP/webhost customer do you think your host should do filter or do you rather manage that yourself?
We are successfully using fail2ban on our server (CentOS 6.6, Plesk 12.0.18), that is, jails running and blocking potential intruders
However, we tried to create a custom jail for the CMS that is being used by most of our clients.
I followed the instructions (Tools & Settings > IP Address Banning (Fail2Ban) > Jails > Manage Filters > Add Filter) and created the filter I wanted, but then it does not appear in the list, even though it displays a message reading that the filter was created successfully. Then, if I try to create a new Jail, the filter is not available from the list.
Looking at the directory /etc/fail2ban/filter.d/ I can find a file that has the same name as the filter I created, with a .local extension (the file name does not contain whitespaces or other special characters)...
I have set up a vacation filter in Horde, but only in once in a while it really returns a vacation message, depending on who is sending an email. In most cases,the message arrives without triggering a response.The messagelog shows two scenarios, one for an successful vacation response and one for emails that fail to trigger a response.Sucessful event:
Oct 9 10:48:24 server dovecot: service=lda, user=xyz@mydomain.com, ip=[]. sieve: msgid=<408-EAS2941777BF41EEBE6640B691D3A00@axy.gbl>: sent vacation response to <guntherk@hotmail.com>
and then
Oct 9 10:48:24 server qmail: 1412844504.308454 starting delivery 21782: msg 33566019 to remote abc@externaldomain.com
then the message is stored into the users inbox.
Unsuccessful event:
Oct 9 10:55:39 server dovecot: service=lda, user=xyz@mydomain.com, ip=[]. sieve: msgid=<trinity-90b5e87d-183b-49b8-8e3e-d2f98b96df3e-1412844932925@uvw-com>: discarded vacation reply to <>
then the message is stored into the users inbox.
The actual version of Plesk (v12.0.18) on Centos 6.5 with Dovecot & Qmail is beeing used.
We have identified that messages from your IP are being filtered based on the recommendations of the Symantec Brightmail filter as well as our internal Smart Screen Filters. The filter was initiated by Hotmail at (5/20/2009 12:00:00 AM) PST due to a large volume of emails that were sent prior to this time.
We will be happy to work directly with Symantec on your behalf to investigate and possibly resolve this problem. In order to move forward, we will need examples of the messages that were caught by the Brightmail filters.
I am running a small hosting operation and would like to know more about SPAM filtering and controlling. SpamAssasin is installed on my server but it does not do much. I was looking into different solution with a anti-spam device and would like to know which one is recommended the most: sonicwall, barracuda or symantec? (total email addresses is less than at thousand)
View 4 Replies View RelatedHow much CPU & RAM load does your spam filter put on your VPS? It seems logical that the more mailboxes hosted, the more VPS resources the spam filter will consume - especially if any of the email addresses are targeted by spammers (or the user is careless and gives out their email address everywhere - as many do).
It's become so much with some of our subscribers that we have had to offer a hardware spam filter, to keep the load off the VPS. It's been great in that the VPS's protected by it have seen a dramatic performance increase....but are these subscribers unique in some way?
And so here is my question...how much CPU is everyone's spam assassin/spam filter using and how many mailboxes do you host on your VPS? very curious...
Anyone else have problems with Yahoo Spam filters being overzealous? I recently setup a new domain and a few email accounts. After sending a few test messages to my Yahoo email, each one of them was flagged as spam. I changed the text to a more regular email, with no controversial words and still the same result. I notice that Yahoo regularly traps some newsletters I subscribe to in my spam filter, but rarely, if ever legitimate emails. I checked with my web host who informed me they are not on any spam blacklists and that I would have to contact Yahoo. Yahoo's help is quite a maze (designed to make you lose interest and move on), so before I continue hunting for how to contact Y!, I thought I would come here to see if this is a common problem (with a common fix).
View 1 Replies View RelatedI'm trying to get a list of all sites on a Plesk 12 server. This is the request:
Code:
<?xml version="1.0" encoding="UTF-8"?>
<packet version="1.6.6.0">
<site>
[Code].....
I'm wondering if theres anything I can install on the server that will either filter or track outgoing spam. I don't want to limit the number of emails sent per hour or anything, I just want to be able to maybe search through some flagged emails or something. Or if they send the exact same email more than x times it can disable their account... I'm not sure
View 1 Replies View Relatedsituation:
- compiled and installed php 5.5 and 5.6
- both versions work fine and are registered in plesk
- base configuration for php is set for each version in a custom.ini
issue:
- plesk php-settings are not applied: not matter what I change in Plesk php-settings, the values from my custom.ini file are used
What did I do wrong? How do I re-enable plesk php-settings?
Addendum: The php-settings apply esspecially to post_max_size and execution_time
I am trying to change the default php settings under domain (upload_max_filesize & post_max_size) but nothing happens. I am running PHP 5.5 in FastCGI. I also changed it to Centos default PHP (5.4.16) but nothing happens again. It only works when PHP runs as Apache module. The problem is on FastCGI Application.
My server: Centos 7, Plesk 12 Check the screenshot for installed components.
so my website is working perfectly fine for a few months now, and im looking to use Roundcube instead of Google Apps.What are the DNS settings i need to change to for my domain registrar?Currently i have the following records, and it can only send email, and not receive.
A Records @ IP Address
A Records webmail IP Address
I cannot find the DNS Setting in Websites&Domain TheWebsite/Show More
I tried changing:
Tools&Settings
Plesk
Custom View setting (DNS template settings checked)
Also:
Tools&Settings
Plesk Appearance
Interface Management
-Power user View
(with & without) Use Custom View-Service Provider View
(with & without) Open hosting operations in Server Administration Panel
However when I go to
Websites&Domain TheWebsite/Show More, the DNS settings are still missing.
Is there any other setting I can try to show the dns settings?
Centos 6.6
Plesk 12.0.18 Update #30
Impossible to find a way to show, by default, all domains and websites...
When I log on the Plesk Admin, I come first on a list of websites and domains, but they are not «all» listed. I have to go to the full bottom of the page to click on «Show all».
I didn't find a preference or anything else to change that, and I don't understand why all domains are not listed.
Where I can get full country list ? I need it to my new site and there missing lot of country in the list. I have 109 country but world have more ....
List must be like this:
(1, 'af', 'Afghanistan'),
(2, 'dz', 'Algeria'),
(3, 'ar', 'Argentina'),
(4, 'au', 'Australia'),
Have search on internet but not find good sites!