I have loads of spam messages being sent from my VPS and I think one (or more) of the legit email accounts are used to send spam (either someone worked out the passwords or users of those accounts have malicious software installed on their machines.
How can I check which email accounts send which emails? Currently nothing is being logged by qmail (/var/log/mail* are empty).
i just checked my whm Mail Queue Manager and i see tha shocking number
28699 emails!
most of it is from nobody?
how to see which program or who send this email?
I have a VPS based on Hypervm+Lxadmin.
I want to limit each user to maximum 20 mails per hour. Is this possible? If yes, how do I do it?
How does one dump the contents of a Qmail?
That is emails that are waiting to be sent which are not going to be sent since they are bad emails so they are just stuck in the queue and are killing cpu resources, how does one tell Qmail to dump all unsent emails waiting in the queue?
Everything on our Qmail installation is working fantastic except for one thing (most of the qmail patches are installed from [url]:
If a user sends an email to several recipients, often times, all users of the list will receive several copies (10 times or more) of the email.
So far I think the situation is that a user sends a weekly update (sort of mini mailing list to 20 users or so) by just adding them as BCC in their outlook.
Then I think one of the 20 emails bounces or throws back a deferral, and then qmail resends the email many many more times not only to the bounced recipient (but also to the entire list of recipients in the BCC)
I'm having a hard time figuring why me emails are not delivered to mailboxes.
A bit of context:
OS: Ubuntu 12
Plesk pannel: 11.5
This server was supposed to be a new server (upgrade) from a previous who was working correctly (Also Linux with Plesk but both older versions).
After new server installed and websited up and running, I decided to create mailboxes and then copied all mailboxes (including emails and folders) to this new server.
First issue I got was i could not connect, until I figure out permissions were incorrect (for root after copy) and fixed it to be accessible by "popuser" (each user to access his mailbox).
Now i can connect, but new emails stay on qmail and can't be delivered to mailboxes.
Even after I have deleted the emalboxes and recreate them (now new emails are being delivered) all those emails in the queue can't be delivered.
I forced queue flush with "postqueue -f" but I get errors on the log:
(temporary failure. Command output: .qmail has prog delivery but has x bit set. (#4.7.0) 4.2.1 Message can not be delivered at this time )...
Which user should i give permissions (if that is the case) so tha both popuser (email user) and qmail/postfix can write on the mailboxes and deliver messages?
i recently got a new server and i allowed a programmer to install exim, squirrelmail and spamassin for me.
the email system is working fine.
i am paranoid that he might have done some tweaking on my server which allows all my ingoing and outgoing emails to be cc'd to him.
im sure this is possible if someone gets root access to the server.
how to detect this and make sure that i am not bugged.
I have purchased a server for layeredtech a few months back, and I just reliased that no one is receiving emails of their subscription in the forums, no contact forms are working on website, simply the server is not seding out the emails..
how can I fix it OR where to check whats wrong why its not sending emails?
i am looking some shared hosting plan,
some companies say each account can not use system resource (ram and cpu) over 5%,
i want to ask how do they record the value?
ps.the server is centos with cpanel.
I am facing to this trouble: apache max out the number of connections. When viewing status, all I get here
Code:
SrvPIDAccMCPU SSReqConnChildSlotClientVHostRequest
0-028240/6/65R 0.1414290.00.020.32 ??..reading..
1-028170/17/65R 0.111510.00.030.22 ??..reading..
2-028350/3/57R 0.20112210.00.000.24 ??..reading..
3-027570/33/62R 1.431412930.00.130.21 ??..reading..
4-026430/75/75R 2.12153190.00.310.31 ??..reading..
5-026440/52/52R 2.061610.00.240.24 ??..reading..
6-028180/13/60R 0.621600.00.070.22 ??..reading..
7-026490/63/63R 2.84143070.00.370.37 ??..reading..
8-028190/7/43R 0.271610.00.020.27 ??..reading..
9-028080/27/76R 0.361410.00.040.29 ??..reading..
10-026750/50/52R 2.9617630.00.260.26 ??..reading..
11-027720/23/49R 3.641600.00.100.19 ??..reading..
12-026620/64/64R 2.201520.00.290.29 ??..reading..
13-027730/25/64R 1.121500.00.140.19 ??..reading..
which account on server is the reason please? I am on CentOS box with DirectAdmin.
In the past WHM gave us the chance to check the hosting accounts daily cpu, memory and mysql usage in server status, but on the new WHM/CPANEL releases we noticed that this values are not so precise as they were.
Anyone know how can be found the average use of cpu/memory/mysql of each hosting account letting the hosting companies understand who uses more resources?
i have a fedora core 4 server.. and i want to install a good Qmail email server to host some emails of diferent domains..
On searching i found that Qmail should be install with those associated programs/system for a better server :
Qmail itself
EZmlm and EZmlm-idx
Autoresponder
Vpopmail
VQadmin
maildrop
QmailAdmin
Courier-imap/imaps with Courierpassd
Squirrelmail web mail program ......
I have a problem with email accounts for a user which recieve email messages all wright but he can't send any email. All emails he send (even for himself) arn't delievered. He doesn't recieve any error messeges in return.
I thought to check exim_mainlog and exim_rejectlog but I don't know what exaxtly should I look for. and what needed to be reconfigured.
I am running Exim on RHE Linux and CPanel/WHM
I own my domain [url] and have a reseller plan on a shared host [url]I have the DNS on godaddy pointed to the nameservers of reyox and on the Cpanel of my domain at reyox I have a forwarding account [url]set to forward to my gmail account.
To the best of my knowledge this has worked flawlessly for years but recently I have been starting to not receive emails from people. I found out when I wasn't getting replies I had been expecting and when I inquired or called the people instead they told me that hey replied... it's been happening over and over again lately.
When I asked my host last week they replied: "We did clear up some mail issues last night, some issues with the queue processing."
However after that it kept happening and now I am at a loss.
I don't know what's wrong nor how to troubleshoot it... It happened with people that are on all sorts of domains (gmail, aol, personal domains etc) and it happens sporadically...
It's really frustrating because I don't know what else I am not getting considering that every other day I find out about an expected email I didn't get.
The werid thing is that none of the senders whose emails got lost reported that they received a bounce issue...
how I can address this in terms of troubleshooting it and finding a solution?
Is there some sort of email monitoring services like there are site uptime monitoring services?
One of my domains has been moved to another hosting company, and now I need to export all emails from the mail account in Plesk in order to import them to the new mail system. I figured the easiest way to IMPORT is to access the new mailbox via Outlook, and import as a .csv file. But I need exporting all the emails from the inbox and sent folder into a .csv file.
I've found the location of the mail box (var/qmail/mailnames/domain.com/user/maildir) but now I'm stuck and don't know how to proceed. Is there an easy way to export all emails?
I've tried through webmail (Roundcube) and there is a "download mail" feature that downloads the message in eml format, but that doesn't work on bulk, only for one mail at a time (and this isn't an option for me since we are talking +1000 emails). Also I'm a bit usure on how to import eml files to outlook (drag'n'drop doesn't work), so a csv option would be perfect.
1. What is the difference between the send & smtp tables within MySQL's eximstats?
2. What do they log?
3. Do they get cleaned up and old stats gets removed?
My host gave refuge to a ROKSO spammer and got the C-block listed in SpamHaus and cant get it removed.
So they mapped a new, clean IP to my server and I need to change the IP that my MTA is sending out under. Since I didnt set this up and the guy who did is not avaliable to me ATM, I cant seem to figure this out.
Every email which gets automatically sent out from my server begins with:
Reply-To: noreply@MYDOMAIN.com
X-Mailer: PHP/4.4.7
Message-Id: <20080319210750.564111CEC004@mx.MYDOMAIN.com>
Date: Wed, 19 Mar 2008 22:07:50 +0100 (CET)
Dear DOMAIN.com Member,
This is not in our PHP code or anything, and I can't seem to remove it, its just a tad annoying. How do I remove it?
I have these lines in sendmail.mc and I've compiled the sendmail.cf with them:
LOCAL_DOMAIN(`freesexdoor.com')dnl
MASQUERADE_AS(`freesexdoor.com')dnl
FEATURE(masquerade_envelope)dnl
MASQUERADE_DOMAIN(localhost)dnl
MASQUERADE_DOMAIN(localhost.localdomain)dnl
I have the users daemon, freesexd and root in the trusted_users file. I have restarted sendmail (using service sendmail restart). I have the domains: server.freesexdoor.com, freesexdoor.com and mail.freesexdoor.com in the sendmail's local_hosts file.
In Apache 2's httpd.conf, I have this: php_admin_value sendmail_path '/usr/sbin/sendmail -t -i -f freesexd [at} freesexdoor.com'
Yet when I sent an e-mail with php to advertising [at} freesexdoor.com, I got these headers in the e-mail, which don't look good to a spam filter:
Received: from localhost.localdomain (IS-3293 [127.0.0.1])
by localhost.localdomain (8.13.8/8.13.8) with ESMTP id
Received: (from daemon@localhost)
by localhost.localdomain (8.13.8/8.13.8/Submit) id
Message-Id: <200712180935.lBI9ZrRs005480@localhost.localdomain>
Additionally hotmail rejects my e-mails and it is obvious why. (My OpenSPF record is fine btw and on my former server I was able to send e-mails with it fine.)
Naturally I want something like "freesexdoor.com" to replace "localhost.localdomain" in those header lines. So how can I get this working?
The OS is CentOS 5 by the way.
I am currently setting up my server, and are experiencing some problems.
Some of the mails sendt with the php mail() func, ends up in the mail queue in DA, and I get the following error log in DA:
2009-06-04 20:36:02 Received from <> R=1MCHnG-0005uQ-9v U=mail P=local S=1344 T="Mail delivery failed: returning message to sender"
2009-06-04 20:36:02 routing failed for admin@vmnd001.local <admin@munnbind.net> F=<>: Unrouteable address
2009-06-04 20:36:02 routing failed for admin@vmnd001.local <admin@munnbind.net> F=<>: Unrouteable address
*** Frozen (delivery error message)
This only happens with some email domains though. If I set the recipient to my yahoo mail, it works as a sharm, but when I set my other email (<<removed>>) as recipient, i get the error log above.