Plesk 12.x / Linux :: Spam In Mail Queue
Jun 25, 2015I have Spam in the Mail Queue.
How can I detect, where it come from, or how can I avoid it ?
I have Spam in the Mail Queue.
How can I detect, where it come from, or how can I avoid it ?
It is posible add new mail handler before queue for spam? Example:
mail_handlers_control --add --priority=10 --executable=/usr/local/psa/handlers/hooks/spam --name=spam --enabled --queue=before-queue --type=recipient-domain --mailname=domain.com --context=text
I need for scan relay mail ....
On the server, there is installed a WordPress installation. Mail from this WordPress installation never reaches for example suscribers. Almost all mail remains in the Queue and will be deleted after 7 days. Could it be because I do not have an SSL Certificate? %
View 1 Replies View RelatedMy mail queue is growing up. I've stopped qmail but the queue goes on growing I must have an script running injecting mail in the queue, how can I find the script? I looked the running process (ps ) but I can not find anything (there is a lot of process!!!!)
View 4 Replies View RelatedI am relatively new in Plesk and have problems with mail not being sent properly. On the server, there is installed a WordPress installation. Mail from this WordPress installation never reaches for example suscribers. Almost all mail remains in the Queue and will be deleted after 7 days. Could it be because I do not have an SSL Certificate? I use:
Plesk 11.5
CentOS 6.6
postfix
Log file + configuration
I can receive email from all accounts and all domains.
The problem is that when sending an email to an external email (gmail., hotmail, outlook.com .... etc) this is sent to mail queue and do not leave that place.
Version 12.0.18. Using QMail.
If I attempt to remove even a small message from the mail queue, using the panel interface, the screen grays slightly but nothing happens. If I refresh the screen after several minutes, I'll sometimes get the following message:
"This operation is taking too long. Check the results in a few minutes."
Switching to Postfix eliminated the problem. But with Postfix, all of my Mailman lists (scores of them) broke, so I had to switch back -- and the problem reappeared.
I contacted the guys who I pay to watch over my linux Cpanel server and I do not think they know how to fix the problem. When I look in my mail queue manager in WHM I always see these spam type emails. I also see that my site IP gets blacklisted on:
[url]
I delist and then it appears again a couple of days later. My server is only used to send emails such as registrations and user notifications that they have subscribed to. Could anyone please tell me how to get rid of the spam?
The problem is that all the mail that exits my VPS server (OVH) is going to the spam folders of Gmail, Outlook, etc accounts.
I've tried to connect my Gmail account to check via POP3 my inbox on my VPS, and all I get is an SSL error.
I have different adresses configured with several domains on the same server. All the emails send to gmail/hotmail adresses are marked spam.
Looking in the headers everything seems fine, including SPF:
Delivered-To: xxx@gmail.com
Received: by 10.202.174.138 with SMTP id x132csp563903oie;
Wed, 20 May 2015 04:53:19 -0700 (PDT)
X-Received: by 10.180.109.136 with SMTP id hs8mr40446245wib.73.1432122799197;
Wed, 20 May 2015 04:53:19 -0700 (PDT)
Return-Path: <x@x.nl>
Received: from x.net (x.net. [xx])
[Code] ....
testmessage
The server is not blacklisted...
Recently, I keep getting an email from my dedicated server company (godaddy, plesk 8.2 windows) that I've reached my daily limit of 1000 emails when I only send like 20-40 a day max.
So I want to take a look at whats going on, what emails have been sent/received and are still in queue?
Can can I access my mail queue using Plesk? And then how can I delete them?
All bounce emails are getting stack in queue (deferred). I tried a few suggestions I found around but nothing changed.
Ubuntu 12.04
Postfix
Plesk
I have a server(godaddy) with plesk. It was all working well till 8 - 10 days ago. I didnt notice it one week later where I started receiving a lot of failed mail notices. Then on investigation, there were more then 50K spam mails in the mail queue and the mails that were supposed to be sent(registration, forgot password) were also held up in the queue. I found the source of the spam and fixed that.
Also I cleared the mail-queue. Now when I try to send out a test message, it still gets held up in the mail queue. But I can send a test mail to the same domain (info@mydomain.com). All new user registration mails are also held up and this is greatly affecting the site.
How can I configure an event so when the number of emails in the queue exceeds a certain number then I am notified on the Mobile Plesk Server Monitor?
View 7 Replies View RelatedI'm having a hard time figuring why me emails are not delivered to mailboxes.
A bit of context:
OS: Ubuntu 12
Plesk pannel: 11.5
This server was supposed to be a new server (upgrade) from a previous who was working correctly (Also Linux with Plesk but both older versions).
After new server installed and websited up and running, I decided to create mailboxes and then copied all mailboxes (including emails and folders) to this new server.
First issue I got was i could not connect, until I figure out permissions were incorrect (for root after copy) and fixed it to be accessible by "popuser" (each user to access his mailbox).
Now i can connect, but new emails stay on qmail and can't be delivered to mailboxes.
Even after I have deleted the emalboxes and recreate them (now new emails are being delivered) all those emails in the queue can't be delivered.
I forced queue flush with "postqueue -f" but I get errors on the log:
(temporary failure. Command output: .qmail has prog delivery but has x bit set. (#4.7.0) 4.2.1 Message can not be delivered at this time )...
Which user should i give permissions (if that is the case) so tha both popuser (email user) and qmail/postfix can write on the mailboxes and deliver messages?
I just upgraded our Plesk 10.4.4 to 12.0.18 (on Ubuntu 10.04, about to be upgraded to 12.04). Now I get the dreaded 'queue file write error' in postfix on message delivery.
It tries to open /usr/lib/plesk-9.0/postfix-queue (which is not there) in this block in master.cf:
Code:
plesk_virtual unix - n n - - pipe flags=DORhu user=popuser:popuser argv=/usr/lib/plesk-9.0/postfix-local -f ${sender} -d ${recipient} -p /var/qmail/mailnames
127.0.0.1:10025 inet n n n - - spawn user=mhandlers-user argv=/usr/lib/plesk-9.0/postfix-queue 127.0.0.1 10027 before-queue
127.0.0.1:10026 inet n - - - - smtpd -o smtpd_client_restrictions= -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o smtpd_data_restrictions= -o receive_override_options=no_unknown_recipient_checks
127.0.0.1:10027 inet n n n - - spawn user=mhandlers-user argv=/usr/lib/plesk-9.0/postfix-queue 127.0.0.1 10026 before-remote
plesk_saslauthd unix y y y - 1 plesk_saslauthd status=5 listen=6 dbpath=/plesk/passwd.db
And on top of that, If disable all the milters/proxy and just try to deliver to plesk_virtual directly, the e-mail just disappears. Postfix thinks it was delivered, but it is not.
I also tried piping some text through /usr/lib/plesk-9.0/postfix-local with the same parameters postfix gives it, but also then nothing. No error, no exit code, no message in maildir.
There are a bunch of fixes around for the queue file write error, but nothing works because the nature of my problem is different. There is a KB article around for Plesk 9, which can hardly be useful.
I tried restoring postfix-queue from the backups, but if I try to use that, the mail.log eventually says:
Code:
Jan 30 01:20:00 ytechosting /usr/lib/plesk-9.0/psa-pc-remote[6621]: Message aborted.
I also used /usr/local/psa/admin/sbin/mchk to no avail: the only change it makes to my master.cf, is adding an empty line. And, I suspect it uninstalled my psa-courier, because it was gone at some point, and mchk was the only thing I did after knowing courier was still there.
How can the postfix config refer to that postfix-queue when it's not there? Is this even a valid master.cf file for Plesk 12?
We want to configure our PPA mail node to send all outbound mail through our spam filtering appliance but don't know where to start.
Reading standard Postfix docs give basic instructions on how to direct a handful of domains through a mail relay but we want to direct every outbound email from all domains through our spam filter.
We also want to ensure that any regular updates to the mail node won't break or undo this config.
Today in a plesk 12 with mail control (20 mails per hour per mailbox) a spammer stole a password of a mailbox and send nearly 1000 mails in two hours.
How can it is possible? Also in the stats I see 0 mails sent. In the logs (var/log/mail.log) I see the spam wast sent from a mailbox...
I have 5 Linux Plesk 12 servers, and I use Spamassassin, usually at a sensitivity of 2 or 3, I also use the following DNS
Blackhole lists: zen. spamhaus. org;b. barracudacentral.org;abuse.rfc-ignorant.org;cbl.abuseat.org;bl.spamcop.net;nomail.rhsbl.sorbs.net
But all of this seems to have minimal effect. I examine spam that comes through which looks very obviously like spam, but Spamassassin gives it a very low score, usually in the negative numbers.
Is SA just not as effective as I thought? Seems like if Gmail, etc can filter spam so effectively, then why can't SA? If there's something I'm not doing right, or what you all do to combat spam with Plesk 12.
My server is saturated in SPAM e-mails being sent from it, however I am struggling in tracing the root of this problem. I have now exhausted 4 IP addresses and our provider is blocking port 25 automatically on a number of occasions now.
I have used the KB article: [URL] .... to trace the highest senders of e-mail, however this has proved to be unsuccessful in finding "all" of the offending domains.
I have suspended e-mail and domains on a number of subscriptions due to the high number of e-mails being sent from the system. I have also enabled outbound mail control and set limits to 10/hr however there are domains attempting to exceed this on an hourly basis. I have investigated these subscriptions but am not able to find anything offending. Is there any feature within plesk that can show me exactly where the spam is coming from...
I am dealing with a situation which i cannot understand. I am running an website for a resort and occasionally i am sending e-mail stop the people who book villas using the website. By occasionally i mean last year i sent 2 e-mail campaigns with a proper spam score.
However, at this moment, even the e-mails that i receive from the website's contact form arrive as Junk into Gmail for example.
Domain abc.com is hosted on our server, it has a hosted e-mail 123@abc.com. This e-mail adress keeps getting SPAM messages from an address abc@srv2.xyz.com (where srv2.xyz.com is our server FQDN). What we understood by reading the headers (posted below) is that someone is sending an e-mail to support@abc.com. This e-mail adress, as configured in Plesk, redirects e-mails to 123@abc.com. But we don't understand how someone managed to send an e-mail from an unexistent abc@srv2.xyz.com to it.
Here are the headers:
DomainKey-Status: no signature
Return-Path: <Coulter_Faustinoa1@aspli.com>
X-Original-To: 123@abc.com
[Code].....