Qmail Attack

Feb 23, 2008

my server load is currently

load average: 13.23, 11.34, 10.53

when i look at the apache server-status, it says i am using .723% of cpu.. so i don't think that is the problem.. i ran this command..

/var/qmail/bin/qmail-qstat

and it came out with..

messages in queue: 3061
messages in queue but not yet preprocessed: 29

is that a lot of messages in queue?

when i do top.. these are some of the processes that come up first..

10749 popuser 18 0 12.9 0:00.39 0.1 2924 380 304 D qmail-local
368 popuser 16 0 2.7 0:15.32 3.9 30720 19m 2244 S spamd
10712 mailman 18 0 1.7 0:00.07 0.6 5764 3124 1800 D gate_news
10678 root 17 0 0.7 0:00.09 0.2 3820 1064 780 R top
178 root 15 0 0.3 81:43.17 0.0 0 0 0 D kjournald
1827 root 15 0 0.3 76:52.47 0.1 2412 456 380 D syslogd
9170 qmails 15 0 0.3 50:27.14 0.1 2448 540 372 D qmail-send
9174 qmailr 16 0 0.3 7:55.07 4.6 83080 23m 264 S qmail-rspawn
9413 root 16 0 0.3 0:00.09 0.5 10292 2708 1956 S sshd
10089 popuser 18 0 0.3 0:01.15 0.1 3312 380 304 R qmail-local
10345 popuser 18 0 0.3 0:00.35 0.1 1540 376 304 D qmail-local
1 root 16 0 0.0 0:43.19 0.0 1888 92 64 S init
2 root 34 19 0.0 20:19.12 0.0 0 0 0 S ksoftirqd/0
3 root 5 -10 0.0 0:03.87 0.0 0 0 0 S events/0

View 13 Replies


ADVERTISEMENT

Plesk 11.x / Linux :: Reinstall Qmail After Spam Attack

May 22, 2014

I need reinstall qmail after spam atack and follows the post.URL....It says:

rpm -Uvh --force psa-qmail

but my system return an error message..error: opening psa-qmail failed: it does not existe file or directory (error: la apertura de psa-qmail falló: No existe el fichero o el directorio)

rpm -q psa-qmail

return

psa-qmail-1.03-cos5.build1013120126.11

And my system is CentOS

View 3 Replies View Related

Install QMAIL Mail Server With Qmail Admin And All..

Aug 24, 2007

i have a fedora core 4 server.. and i want to install a good Qmail email server to host some emails of diferent domains..

On searching i found that Qmail should be install with those associated programs/system for a better server :

Qmail itself
EZmlm and EZmlm-idx
Autoresponder
Vpopmail
VQadmin
maildrop
QmailAdmin
Courier-imap/imaps with Courierpassd
Squirrelmail web mail program ......

View 7 Replies View Related

Qmail

Jun 23, 2007

I see many mails in the queue lists,and from the title I think is spam.

But how I can see from which customer is?

In process,it says as client the Root

What Can I Do?

The Sending mail domain,is not hosting in us - I check it.

View 0 Replies View Related

Qmail - Does Not Like Recipient???

Nov 14, 2006

Hi,

I can receive emails from qmail but couldn't send out any... I checked my mail logs and found:

Nov 14 17:53:20 server relaylock: /var/qmail/bin/relaylock: mail from 11.22.333.444:37277 (server.domain.com)
Nov 14 17:53:23 server qmail: 1163498003.114915 delivery 708: failure: 11.22.333.444_does_not_like_recipient./Remote_host_sai$

Nov 14 17:53:19 server qmail-queue[11421]: mail: all addreses are uncheckable - need to skip scanning (by deny mode)


11.22.333.444 is my server ip. Why Do I got this error and how to fix it??
Anyone help please greatly appreciate.

Thank you

View 0 Replies View Related

Inter7 And Qmail

Dec 9, 2006

I recently upgraded my Qmail systems. Since Inter7 was the one who did it for me previously, I contracted them to do it. Two years ago I was very impressed, my load was a high 20s, after they finished it was in its low 4-5 with 4 CPU processors.

This time I asked for an upgrade for the Qmail in general and also its spam filters as I am getting more and more spams and the load is increasing. They stabilise the server loads, add tons of fantastic new layers of spamming protection, helped monitored and customised their scripts to my systems.

Real professionals and real knowledgeable people when it comes to Qmail. I had nothing but praises two years ago. Two years now, I have still nothing but praises.

View 0 Replies View Related

Exim Or Qmail Better?

Dec 11, 2007

ive been asked to use exim coz its easier to use with spamassasin.

but is exim as safe as qmail?

ive heard qmail offers better safety.

View 11 Replies View Related

Seconday MX Qmail

Jul 8, 2008

I am trying to setup qmail to handle secondary mx for 1 domain name. Panel installed is LXADMIN.

I had modified the /var/qmail/control/smtproutes and /var/qmail/control/rcpthosts, also restarted qmail.

To test this secondary mx, I had modified the domain's dns to point the first mx to something invalid like "heheeeehead.com" so that I hope it will send to the second mx which is my secondary mx.

It did send to the secondary mx but with an error as follows:
<dan@domain.com>:
Sorry, I couldn't find any host named mail.domain.com. (#5.1.2)

Its true the host mail.domain.com is invalid as I had pointed to invalid domain like "heheeeehead.com". But why doesn't the qmail wait a while and retry? Because I got the bounced back error almost immediately after I sent.

The current default value for /var/qmail/control/queuelifetime is 604,800 seconds, or 7 days.

So I'm not sure why it bounced back immediately.

But I'm not sure if this is the correct way to test backup mx.

View 6 Replies View Related

Qmail And Spamassassin

Sep 29, 2006

Hi i'm trying to use spamassassin from each user using .qmail from each mail user but i can't it dosen't works. Also i wish to know if i have any rule on spamassassin to check some words like sex viagra ,etc and if it's found it will delete it.

View 0 Replies View Related

Maildrop .qmail

Nov 13, 2006

i'm trying to filter spam from inbox folder to spam folder but i wish to know if it's posible to use maildrop directly without vdelivermail because i don't have vdelivermail.

View 0 Replies View Related

Qmail Log Format

Oct 30, 2008

qmail log format. The log format in the file /usr/local/psa/var/log/maillog is wrong and is showing as below. It is missing the email account name and the mailbox name. Any idea why is causing this and how can modify the log format in file?
Current log format
======================================
Oct 27 17:31:33 host123 smtp_auth: smtp_auth: SMTP user : logged in from (null)@isp.isp.com [11.11.22.22]
======================================
======================================
The actual log format should be as follows.
======================================
Oct 27 09:28:18 server smtp_auth: smtp_auth: SMTP user test12@domain.com : /var/qmail/mailnames/domain.com/test12 logged in from unknown@isp.isp-11.11.11.11.isp.net.in [11.11.11.11]
======================================
Details:
[root@ser control]# rpm -q psa-qmail
psa-qmail-1.03-cos5.build84080425.19
[root@ser control]# rpm -q drweb-qmail
drweb-qmail-4.33-cos5.build84080425.19
[root@ser control]# rpm -q psa
psa-8.4.0-cos5.build84080425.19

View 0 Replies View Related

Set Qmail Log Directory

Aug 1, 2007

How do i set qmail to log to other directory other than /var/log/qmail/qmail-xxxx/current ?

This is a FreeBSD system

View 11 Replies View Related

Which Folder To Backup In Qmail?

Dec 27, 2007

just wondering which folder in qmail would contain my inbox and sent emails?

View 4 Replies View Related

Qmail RHEL 4 Not Working

Nov 21, 2006

My server is not sending mail for about a week, and i dont know what is the problem and how to fix this.

also, in PLesk, it still states that Mail is on and active.

Could anybody point me the direction how to fix that?

i am having a server runnung RHEL 4

View 6 Replies View Related

Qmail Abuse - Server Log

Nov 20, 2006

I'm a web programmer with little knowledge of server maintenace, tasks, configurations, etc.

I run a website hosted a dedicated box with godaddy. It appears my MAX SMTP limit (25,000) is reached at times. I know for a fact my subscribers are not generating this many emails.

1) Is there a way I can see a log file all of the email messages that were sent using my SMTP qmail account?

2) I've entertained the possibility that someone has "hijacked" my qmail account and is using it send out spam messages?

Any help in being able to get to a log for qmail or to run some other kind of diagnosis to figure out what's exactly going on with my server and why my max smtp limit is reached constantly.

View 3 Replies View Related

Plesk Qmail Queue

Oct 31, 2009

Might be a weird question, but I have a test server setup with a single domain name and I am trying to figure out an easy way to get a bunch of emails to stay in the queue, anyone have an idea?

View 4 Replies View Related

Qmail Queue Not Processed

Feb 13, 2007

I can receive e-mails from another server, as well as another domain on this server. I can send e-mails to another domain on this server, but anything out to another server, gets stuck in the queue. I am using Plesk 7.0.2

Plesk Queue info shows:
Messages in queue: 0 not preprocessed, 0 local, 630 remote, 630 total.

In the maillog, I see " deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connecti
on._(#4.4.1)/"
after an outbound e-mail.

Thanks

View 4 Replies View Related

Qmail :: Received-SPF: Neutral ....

May 12, 2009

I wanted to try HyperVM/LxAdmin setup from sometime now. I finally have one but I am getting trouble with its Qmail MTA. I am posting here hoping to get some help.

Let me tell you the issue.

I have my main vps IP: 10.10.10.22 (I have 3 additional ips).

I have setup 2 domains on their dedicated IPs. (10.10.10.23 & 10.10.10.24). However, whenever I send an email, I get outgoing IP to be 10.10.10.22. I searched on Google and found out that I need to patch qmail with outgoingip.patch to change the outgoing IP.

But how to patch my already installed qmail??? I tried but failed.
I am running Centos 5.3 with HyperVM/Lxadmin

Also, even if I host a domain on main IP, my SPF record is always

Quote:

Received-SPF: neutral (google.com: 10.10.10.22 is neither permitted nor denied by domain domain.com) client-ip=10.10.10.22;

View 4 Replies View Related

VPS Provider With Qmail Or Sendmail

May 4, 2009

Are there any VPS providers with verifiable expertise in either qmail or sendmail?

Acceptable demonstration of expertise would include at least one long-term employee with one or more of: citation in respected MTA related reference book
useful tech posts to any related email list/forum/whatever

View 7 Replies View Related

Qmail With External SMTP

Apr 27, 2008

I am using Qmail for most of my email accounts which is taking up a lot of my Singapore bandwidth which is extremely expensive. Anyway to configure such that POP goes to my Singapore servers, while I setup a pair of servers in USA for my SMTP needs?

View 1 Replies View Related

Qmail, Php Mail , Hotmail

Jun 19, 2008

I have a vps with a site has phpbb2.

Before one month I migrated to another vps host.

In the old vps, the sending notfications such as reply new topic ( watch ), e-mail activations to new members notifications of the private messages were working very fine and each memeber which has valid e-mail will receiev these notifications from my forum.

The old vps using sendmail.

But the new one using qmail and it is will configured and the e-mail notifications are recieved which means that it is working except the ones who use hotmail accounts begin not recieve anything, the others e-mails are recieved well.

The files are the same, excpet the old uses sendmail, the new vps uses qmail.

After many days of searching how to solve this I decided to contact the support team.

They replied to me that they should do to overcome hotmail receive email problem, reverse PTR record needs to be added and to add SPF records under my domain's DNS zone.

They did and they told me to wait 24 hours, I waited for 4 days and it did not work.

I went back to them and again they look closely to my qmail configurations and it is fine and working and also they made an hotmail account to test and send e-mail form my mail server and it had been accepted which means that my domain and my new IP is not blocked by hotmail.

So their is nothing wrong excpet that email notifications from my phpbb it still won't go to members who have hotmail.

Very strange if the hotmail hates php mail scripts like phpbb why before in the old vps was like, and now suddenly hates.

View 10 Replies View Related

Qmail User List

Jul 24, 2008

How can i sort user who are using 100MB above space in qmail.

View 0 Replies View Related

Sendmail/qmail/exim

Jul 13, 2007

I have few cpanel server, but I have got a question. When mails send using script, does it use exim or sendmail? Are these different? From my understanding exim uses sendmail as MTA, am I right?

View 2 Replies View Related

Qmail Failed To Start

Apr 11, 2007

the qmail failed to start. please help as soon as possible. the swsoft knowledgebase doesnot have any userfull information.

[root@sml ~]# service qmail start
Starting qmail: [FAILED]
[root@sml ~]# /etc/init.d/qmail start
Starting qmail: [FAILED]
[root@sml ~]# /etc/init.d/qmail restart
Starting qmail: [FAILED]
[root@sml ~]#

When trying to start from Plesk get following error:

ERROR: PleskFatalException
Create ShortcutCreate Shortcut
Up LevelUp Level
Unable to make action: Unable to manage service by mailmng: mailmng: Service /etc/init.d/qmail failed to start

System error 2: No such file or directory

0: /usr/local/psa/admin/plib/common_func.php3:153
psaerror(string 'Unable to make action: Unable to manage service by mailmng: mailmng: Service /etc/init.d/qmail failed to start System error 2: No such file or directory')
1: /usr/local/psa/admin/htdocs/server/restart_services.php:28

View 8 Replies View Related

Qmail Slow Response

May 9, 2007

I have Qmail installed on my Centos box. There seems to be some problem with connection because when I run DNSreport from dnsstuff.com on it it shows me that it cannot connect to mailserver.

I tried telnet from local and this is what happened...

telnet mail.mydomain.com 25
Trying XXX.XXX.XXX.XXX...
Connected to mail.mydomain.com (XXX.XXX.XXX.XXX).
Escape character is '^]'.

then nothing happens for a while (about 30s)
and then I receive this greetings message:

220 [mydomain.com] ESMTP NO UCE/SPAM on this server ESMTP

How can I speed up this process? Are there any lookups possible or what?

View 3 Replies View Related

Qmail Not Sending Or Receiving

Sep 24, 2007

Anyone know how to fix this? I put it as plain as possible. I've reinstalled qmail once to see if I can get it to send/receive but it is still not working. I made sure the port is not blocked either.

View 6 Replies View Related

Sendmail To Qmail Migration

Mar 6, 2007

I am switching servers, and the new one uses QMAIL. It was easy to move existing emails between servers when both used sendmail, however ....

Is there a conversion tool or proceedure? I searched but was unable to locate anything online.

QMAIL is not a replacement on an existing server, it is installed on a new server (working fine) and I must bring existing sendmail data over.

View 2 Replies View Related

Qmail Sendmail Failure

Jul 2, 2007

I have a weird Issue with my Qmail program. It happened when I separated webmaster@domain, postmaster@domain, and admin@domain into separate e-mail accounts, instead of having them as aliases of each other. Now the standard server and anti-virus automated e-mails all get bounced, and the bounce messages are overwhelming my admin account.

Also randomly some important messages from approved senders also get bounced and end up in there, but with the sheer quantity of messages (100s per day) I have no way of going through and filtering them out. All spam get's failure notice's, but that's how it should be.

I'm a web designer, not a webmaster, but I ended up in charge of this and can't figure out how to fix it. Some insight into the possible cause would be much appreciated.

Here's a sample e-mail:

Quote:

Hi. This is the qmail-send program at domain.com.
I tried to deliver a bounce message to this address, but the bounce bounced!

<anonymous@domain.com>:
The address you used is not a vaild e-mail address at Domain. If you believe this is an error send an e-mail to admin@domain.com

--- Below this line is the original bounce.

Return-Path: <>
Received: (qmail 32529 invoked for bounce); 2 Jul 2007 05:30:22 -0400
Date: 2 Jul 2007 05:30:22 -0400
From: MAILER-DAEMON@domain.com
To: anonymous@domain.com
Subject: failure notice

Hi. This is the qmail-send program at deltascanlaboratories.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<drweb@domain.com>:
The address you used is not a vaild e-mail address at Domain. If you believe this is an error send an e-mail to admin@domain.com

--- Below this line is a copy of the message.

Return-Path: <anonymous@domain.com>
Received: (qmail 32519 invoked by uid 111); 2 Jul 2007 05:30:21 -0400
Date: 2 Jul 2007 05:30:21 -0400
Message-ID: <20070702093021.32516.qmail@domain.com>
From: root@domain.com (Cron Daemon)
To: drweb@domain.com
Subject: Cron <drweb@localhost> /opt/drweb/update.pl
X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <HOME=/var/drweb>
X-Cron-Env: <PATH=/usr/bin:/bin>
X-Cron-Env: <LOGNAME=drweb>
X-Cron-Env: <USER=drweb>

Dr.Web (R) update details:
Update server: http://update.msk3.drweb.com/unix/433/433
Update has began at Mon Jul 2 05:30:05 2007
Update has finished at Mon Jul 2 05:30:21 2007

Following files had been updated:
/var/drweb/bases/dwntoday.vdb
/var/drweb/updates/drwtoday.txt
/var/drweb/updates/dwntoday.txt
/var/drweb/bases/drwtoday.vdb
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.476 / Virus Database: 269.9.14/883 - Release Date: 7/1/2007 12:19 PM

View 0 Replies View Related

QMail - Uncheckable Addresses

Jan 17, 2007

I'm having a problem sending mail via PHP scripts from my server. It's a dedicated Linux box via GoDaddy. Everything worked fine until all-of-a-sudden mail stopped exchanging. Here's a snippet of the maillog.processed file.

Code:
Jan 17 04:02:23 ip-xxx-xxx-xxx-xxx qmail-queue[9527]: mail: all addreses are uncheckable - need to skip scanning (by deny mode)
Jan 17 04:02:23 ip-xxx-xxx-xxx-xxx qmail-queue[9527]: scan: the message(drweb.tmp.aCFuKy) sent by #@[] to postmaster@ip-xxx-xxx-xxx-xxx.ip.secureserver.net should be passed without checks, because contains uncheckable addresses
Jan 17 04:02:23 ip-xxx-xxx-xxx-xxx qmail: 1169031743.977702 bounce msg 7801105 qp 9527
Jan 17 04:02:23 ip-xxx-xxx-xxx-xxx qmail: 1169031743.977821 end msg 7801105
Jan 17 04:02:23 ip-xxx-xxx-xxx-xxx qmail: 1169031743.978456 new msg 7801103
Jan 17 04:02:23 ip-xxx-xxx-xxx-xxx qmail: 1169031743.978507 info msg 7801103: bytes 6575 from <#@[]> qp 9552 uid 2522
Jan 17 04:02:24 ip-xxx-xxx-xxx-xxx qmail: 1169031744.039434 starting delivery 1966265: msg 7801103 to remote postmaster@ip-xxx-xxx-xxx-xxx.ip.secureserver.net
Jan 17 04:02:24 ip-xxx-xxx-xxx-xxx qmail: 1169031744.039555 status: local 0/10 remote 1/20
Jan 17 04:02:24 ip-xxx-xxx-xxx-xxx qmail: 1169031744.112339 delivery 1966265: failure: xx.xxx.xxx.xx_failed_after_I_sent_the_message./Remote_host_said:_554_Message_refused./
Jan 17 04:02:24 ip-xxx-xxx-xxx-xxx qmail: 1169031744.112453 status: local 0/10 remote 0/20
Jan 17 04:02:24 ip-xxx-xxx-xxx-xxx qmail: 1169031744.112497 triple bounce: discarding bounce/7801103
Jan 17 04:02:24 ip-xxx-xxx-xxx-xxx qmail: 1169031744.112539 end msg 7801103

I've done a little investigation and suspect maybe a DNS issue but I don't know much about server management let-alone DNS.

View 0 Replies View Related

QMail Sending All Requests As Spam

Mar 28, 2008

I have a Qmail server that is using relays.ordb.org

As you probaly know this shut down two years ago. But is now sending all requests as spam. No one is recieving there emails.

this a Standard Qmail,with a hacked qmail-send witch intergrates with Mysqld.

is not installed with qmailroks, or supervise. Can't find the config text file.

how can we remove traces or referrences to relays ordb.org

View 11 Replies View Related

Plesk And Qmail :: Undelivered Email

Apr 21, 2009

I have server running Plesk 8.6 with Qmail. Recently some users complain that when they send email out they received undelivered email from Qmail (plesk) with lots of unknown address. Users are concerned about that mail server is sending out mail that they did not send it to. I have attached one of the typical example that user got.

I have changed domain name and ip address for dummy address. I have no clue that the server automatically append those junk email address to the senders email or the client application did it without user's consent.

View 9 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved