Im trying to troubleshoot the exim install that was included with cpanel. I read that the helo response being localhost instead of a fully qualified domain can lead to mail be directed to the bulk mail folder.
Looking at the mail headers, this is indeed set this way:
Received: from www.mydomain.com ([my_ip_addr] helo=localhost)
How is this response determined and how can I have it be a fully qualified domain name instead?
I am thinking about setting something up that will allow an ssh user to tunnel through the server to view certain sites. However, I want the user who tunnels in to be allowed to view only certain sites, and not all sites.
I figured I could set this up through IP tables, however, if I block all outbound sites, so goes the tunneled user. Is there a way to keep the tunnel alive while blocking all traffic outbound besides a named website, say google.com for example? The users tunneling in will have different IPs, so, I cannot use that to allow the outgoing connections. The only thing I have thought of would be to somehow allow an active connection to be able to receive outbound traffic, if they have already been connected, but, I am unsure if iptables can be set up this way.
Anyone set something like this up before, or perhaps, could point me in the right direction.
I will preface this thread this way:
I know there is no perfect solution to elimating SPAM and not losing "good email".
What do you use that is working well for you? I need some suggestions? I don't have time to babysite/teach a spam filter as I get thousands and thousands of emails each day through various emails address on the server. I cannot use services such as easyat.com as they don't work with server that use a remote/clustered DNS.
I was just wondering if there is a way to control your website (that is, uploading, editing and so on) when you do not have access to your own "home-computer". You do have access to other computers and the internet, but these computers do not have your local root folder of course.
So is there a way to control your website, let's say, when you are on vacation.
Everytime I send an email from my out look or on the webmail I get the following error, its on my small vps running cpanel.
I have already re installed the mail server, installed a diffrent mail server, and also gone in the config and took this out in whm with no joy.
Code:
550 Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
my website serving only a piece of the page, but getting a 'bad server response' in the Activity Window of Safari, and CSS and other errors in FireFox, but both browsers rendering only a portion of the page.
What happened? I hadn't made any changes to the site or server in a long time.
Also it seems to be on the server since others are experiencing the same thing.
Oddly, the other virtual hosts running are fine.
How can we know that how long it takes our server to respond, in terms of Microseconds. Is it take long time while processing an Ms Access database or SQL Server, Sending flash movies to client.
For example, I can accomplish a task while reading data from server database , also I can accomplish it using an image or flash movie.
Which way should be efficient for my visitors, I am using a paid hosting plan.
Also I have another question.
How could I know that a web hosting provider company's server is a fast machine than other company. I have options like "WebHost Company1" & "WebHost Company2"
I host the same website on both servers, while I request some page in a client machine, How could I measure the efficency & speed of the server, I am sure both servers will not send content to client with same speed.
due to any reasons, may be 1 server has more traffic, has slow hardware, has longer route.
Also which technology is faster, ASP, ASP.Net, PHP, coldfusion. Is there some way to measure these facts about a webserver.
In these cases, how could I choose best server. How to made decession about that.
I have a dedicated server that I am renting that appears to randomly respond very slowly for some reason (pings are between 90-4000ms with about 75% packet loss).
This has been happening lately (about once a week for the past 4 weeks) and I thought I had originally found the cause of the problem but it appears I haven't.
Originally, when this problem was happening we were getting an abnormally high about of traffic but a reboot always fixed the issue. I've checked every where I can think of but I cannot find anything out of the ordinary.
ight now we're averaging less than 2Mbps in traffic, the CPU load is less than 0.75, the memory usage is at 55% with no swap being used, Apache connections are normal, no active SSH, FTP, or mail connections, I've restarted all services which had no impact, I've checked the access and error logs but can't see anything out of the ordinary.
I have a ticket open with the data center but I'm trying to figure this out on my own to fix whatever is causing this so I can move my data over to a new server we just got setup over the weekend in a local data center.
I recently made a shift to FDC for one of my servers that I use for downloadable content.
I went for a $199 server with a 100mbps shared bandwidth port. Now, the only problem I seem to be having with it is that downloads appear to be, I would say recognized, very slowly by the server before they start, however, once the download starts I get a full speed. This usually happens during peak times.
I'm using about 10/15mbps on the server according to my cPanel statistics. I just wanted to ask here prior to contacting FDC on this, whether this slow server response time has something to do with the bandwidth port, or perhaps the server's RAM, CPU, etc? Given I'm using quite minimal bandwidth on the port, should I consider having them fix this or upgrade the server instead?
And if I had to upgrade, would I need to upgrade the port or the RAM, or both for this?
Godaddy linux server respons very slow
View 6 Replies View Relatedordered at 5/28/2008
No response yet
I am posting this to tell my experience with UKeasily. I ordered a dedicated server from UKeasily on 8th March.
I did a research on WHT and chatted with their live help. Everything seems great. A tracert to their test IP also shows their server in good location and returned good net stats for me.
However, everything changed after I putting down my orders and paid the money. 8th March is a saturday and I do not expect them to act on week end. I phoned them on monday 10th March and got firm words from them that my order was received and the server will be ready in 48 hours. I was happy to hear it.
Then the bad news come. The dedicated server is not ready on 13th March. I waited for another day to call UKeasily. But only to find out that the UKeasily's telephone numbers are either no longer in use or go to answering machine. UKeasily's live chat has been offline for 5 days. Messages left out on their support system was not answered.
I did receive an email from google checkout telling me that UKeasily informed them the server order was shipped. I myself then checked my email box but found nothing. Called UKeasily again, still the answering machine.
I am running dedicated servers on UK2, OVH and Godaddy. Those companies may have slower server installation time but with good level of support. The level of service received from UKeasily is disappointing.
Beware if you were about to buy from UKeasily as of now. A server company that has the live chat offline for more than 5 consecutuve days and not answering even sales calls may not provide enough technical support while you need it. If you check their website, their live chat is still offline and sales number still goes to answering machine.
We are trying to disable server info into response header.
Header unset Server
Header set Server "unknown"
It is not working.We have installed "Apache 2.4.6-x86 server" on Win 2008 R2 Standard server (64-Bit).
I've just recently installed Plesk Panel 11.5. Previously I was using a basic IIS Mail Server with the current server allowed to relay messages for my Web Sites.After installing Plesk, I went to Tools & Settings -> Server-Wide Mail Settings. In there, I have relaying set to Authorization is required (SMTP) and for the relay access I have the following 3 entries:
127.0.0.1/32
::1/128
<My Servers IP>/32
Whenever one of my sites tries to use this server now to send out mail, I keep getting the following error:Mailbox unavailable. The server response was: Requested action not taken: mailbox unavailable or not local...I've been struggling with this issue for weeks now and have read all the documentation and forum posts I could think of, I've restarted the server, I've run C:Program FilesSWsoftPleskadminin>mchk --all --fix=all
The e-mail accounts that I'm using to send mail from has nothing to do with this server and it's domains, I'm just trying to set the mail server to start sending mails like my IIS server used to.I've found the setting to Open Relay on the server and have activated it, yet whenever one of the websites attempts to send a mail, the same response is received.Mailbox unavailable. The server response was: Requested action not taken: mailbox unavailable or not local.
Problem: I am using to my Centos/Exim/Cpanel server to relay emails. The person who receives my email sees a helo that captures my ISP IP address and lastly the mail server for my domain along with its IP.
My ISP (Verizon) IP is constantly being flagged as a spam source by a variety of RBL's.
My domains have never sent spam and I only send a low volume of emails.
How can I remove my ISP helo IP address from being added to my outgoing email so that the only IP is the IP of domain sending the email?
Example Header:
Quote:
Received: from c-99-172-221-252.hlvd.va.verizon.net ([99.172.221.252]:3389 helo=[127.0.0.1]) <-- remove this part
by server.myserver.com with esmtpa (Exim 4.69)
(envelope-from <email@mydomain.com>)
id 1MLoYc-0004Ol-20
for friend@hotmail.com; Tue, 30 Jun 2009 21:24:18 -0400
I am on a VPS and set everything up myself. When I try and email a friend, I get it bounced back with the following message (with his email filtered):
<<< 550-5.7.1 {mx078} Sorry, your helo has been denied. <<< 550 5.7.1 [url] 550 5.1.1 <**********@gmx.co.uk>... User unknown
I'm pretty sure the user isn't unknown, I have checked and it is his email address. Can anyone tell me what is wrong, and if the problem is on my end or his, and if my end how I might go about fixing it?
I'd like to look at what my HELO configuration is but don't know how or where to look.
I am using a dedicated Linux/cPanel server. I'd like to make sure the HELO is configured correctly. My mailing software is EXIM.
!verify = helo
!verify = reverse_host_lookup
in exim acl and drop message if helo is not passed.
But one issue is this validates for users even having account in the server and trying to send mail using server account to someone else
I want to put validation for only incoming mails "to" this server
What i dont want is to validate the mails that authenticated smtp users send
I have a dedicated linux/cpanel server running various websites with the shared ip and one website with a dedicated ip.
But when sending mail through sendmail from the dedicated ip website the ip in the helo greeting is not matching the ip of the sender, it is using the main shared ip rather than the dedicated ip which is producing a 550 error from some receiving mail servers. I have racked my brains trying to figure this out and was wondering if anyone else has/had a similar experience and found a solution.
By the way the helo greeting sent in mail from the shared ip websites is fine...
I seem to be having a problem with domain forwarding in cPanel.
I have 3 cPanel accounts:
1) foobar.com.np with a POP3 account and forwarders for info@foobar.com.np. Works fine.
2) foobar.com with domain forwarding to foobar.com.np. Works fine too when I send an email to info@foobar.com.
3) foo.com.np with domain forwarding to foobar.com.np. Doesn't work! When I send a message to info@foo.com.np I get the following message in my Exim log:
Code:
2007-11-29 04:11:32 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1IxgMm-0007DW-0m
2007-11-29 04:11:32 1IxgMm-0007DW-0m ** info@foo.com.np R=lookuphost T=remote_smtp: SMTP error from remote mail server after MAIL FROM:<noreply@********.com> SIZE=2059: host foo.com.np [74.86.*.*]: 554 5.7.1 Helo invalid(forged)
2007-11-29 04:11:32 cwd=/var/spool/exim 7 args: /usr/sbin/exim -t -oem -oi -f <> -E1IxgMm-0007DW-0m
2007-11-29 04:11:32 1IxgMm-0007Da-Bd <= <> R=1IxgMm-0007DW-0m U=mailnull P=local S=2006 T="Mail delivery failed: returning message to sender"
2007-11-29 04:11:32 1IxgMm-0007DW-0m Completed
...
As you can see, this domain forwarder is not functioning like the other one (foobar.com) since the domain forwarder for foobar.com DOES actually work:
Code:
2007-11-29 03:58:21 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1IxgA0-0002Gs-Vb
2007-11-29 03:58:21 1IxgA0-0002Gs-Vb => info <info@foobar.com> R=virtual_user T=virtual_userdelivery
2007-11-29 03:58:22 1IxgA0-0002Gs-Vb => *******@gmail.com <info@foobar.com> R=lookuphost T=remote_smtp H=gmail-smtp-in.l.google.com [209.85.133.27]
2007-11-29 03:58:22 1IxgA0-0002Gs-Vb -> *******@gmail.com <info@foobar.com> R=lookuphost T=remote_smtp H=gmail-smtp-in.l.google.com [209.85.133.27]
2007-11-29 03:58:22 1IxgA0-0002Gs-Vb Completed
It looks like Exim doesn't know that emails sent to info@foo.com.np should be a local delivery. I checked the file "/etc/vdomainaliases/foo.com.np" and it says:
Code:
foo.com.np: foobar.com.np
So that should be correct...
domain1.com has two servers:
#Server PHP - hosts php and handles apache/mysql requests.
#Server 2 - handles mail and dns requests.
Yesterday we moved mail from # server 2 to a new mail server, a cPanel one, all mailboxes are created, users can send and recieve email using webmail, mail clients, etc.
But.. while trying to send mails using PHP authenticated from the #Server PHP/Apache/MySQL , we got this error from the mail servers:
Code:
We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail. SMTP -> FROM SERVER: SMTP -> FROM SERVER: SMTP -> ERROR: HELO not accepted from server: SMTP -> get_lines(): $data was "" SMTP -> get_lines(): $str is "220-srv247.serverhost.com
This was working when mails were recieved/sent in Sendmail (an Ensim box), now with Exim 4.x on a cPanel box we got this issue.
Already added IP address from #server php into all Exim whitelists, also added the IP to /etc/alwaysrely, but didn't help.
Im using RHE 5.2 on the mail server and latest Release build.
I formatted my server and installed CENTOS 7 and PLESK 12. I have problems with cbl.abuseat.org. My ip enters in blacklist. I sent email to the support of abuseat.org and abuseat reply:
Please fix your HELO strings.
I check the my configuration and I think is correct:
- Reverse lookup is ok
- Hostname is ok (server.domain.tld)
But I have the file in /etc/sysconfig/network empty. There is only written: # Created by anaconda
Also, is correct the my etc/hosts file?
127.0.0.1 server.domain.tld server localhost4 localhost4.localdomain4
:: 1 server.domain.tld server localhost6 localhost6.localdomain6
I've been plagued by CBL listing for quite some time now, on a linux server with Plesk 12.After months of a fierce fight against every possible malware on the about 120 various websites on this server, extensively monitoring clients emails, enabling restrictive policies and finally even hiring a private security firm to investigate the problems further, we were sure that not a single spam message was sent by our server in any way.
So we finally contacted CBL, exposed the issue and got this answer:The CBL attempts to detect compromised machines in a number of ways based upon the email that the CBL's mail servers receive.During this it tries distinguish whether the connections represent real mail servers by ensuring that each connection is claiming a plausible machine name for itself (via SMTP HELO), and not listing any IP that corresponds to a real mail server (or several mail servers if the IP address is a NAT firewall with multiple mail servers behind it). 54.194.XX.XXX was found to be using several different EHLO/HELO names during multiple connections on or about:
2015:01:09 ~16:30 UTC+/- 15 minutes (approximately 3 days, 21 hours, 14 minutes ago).
The names seen included: xxx1.xx, xxx2.xx, xxx3.xx, xxx4.xx, xx.xxx5.xx, veniceberg.com..Note that the above list may include one or more names that are not fully qualified DNS names (FQDNs). Host names (ie: Windows node names) without a dot are not FQDNs.
The final possibility is that 54.194.XX.XXX is not a NAT firewall, and is instead a single box with many domains provisioned on it, some that send email directly, setting the HELO as the sending domain. If this is the case, to prevent a relisting we strongly recommend setting the mail software on the box so that a single identifying name is used in outbound SMTP connections mail software on the box so that a single identifying name is used in outbound SMTP connections. As an alternate workaround, you can configure the mail software to relay its outbound email through an intermediate mail server. Even a co-resident mail server package (such as IIS on Windows) will do fine.
This pointed me to this Plesk Mail setting (not sure if this selection is the default). Now we are waiting a few days to see if changing to "Send from domain IP addresses" solves the issue. I think this is a kind of issue which deserves attention by Parallels to avoid other users go trough our fatiguing ordeals. If this setting is responsible for getting servers blacklisted, it should be highly discouraged.