We had a non-client (not on our server) that was getting 550 email rejections when he attempted to email us due to having Sender Verify enabled.
In the past I figured Sender Verify was necessary for fighting spam, amongst other things, but have realized that we may be having more rejections than we know because we never hear about them.
Is there a general best practice in terms of enabling Sender Verify or leaving it off? I've never heard about complaints about rejects from legitimate emails senders, so it doesn't seem to be an issue, but then again, you really never know...
I have this customer who have been having trouble to receive some emails from valid senders due to Sender verify failed, both senders have valid accounts.
Here is an example,
De: MDaemon at zeus.XServer.com [mailto:MDaemon@zeus.XServer.com] Enviado el: sábado, 17 de noviembre de 2007 11:16 a.m. Para: albertocarbone@XServer.com Asunto: Error permanente de entrega
Failed address: jsoler@CustomerDomain.com
--- Session Transcript --- Sat 2007-11-17 11:15:19: Parsing message [xxxxxxxxxxxxxxxxxxxxxxxxpd35000148823.msg] Sat 2007-11-17 11:15:19: * From: albertocarbone@XServer.com Sat 2007-11-17 11:15:19: * To: jsoler@CustomerDomain.com Sat 2007-11-17 11:15:19: * Subject: RE: Zona Franca.- Concepto.- Sat 2007-11-17 11:15:19: * Message-ID: [003201c82934$ba953d00$2fbfb700$@com] Sat 2007-11-17 11:15:19: Intentando SMTP conexión con [CustomerDomain.com] Sat 2007-11-17 11:15:19: Resolviendo registros MX para [ CustomerDomain.com] (Servidor DNS: 200.118.2.66)... Sat 2007-11-17 11:15:23: * P=000 S=000 D=CustomerDomain.com TTL=(240) MX=[ CustomerDomain.com] {xx.xxx.13.172} Sat 2007-11-17 11:15:23: Intentando SMTP conexión con [xx.xxx.13.172:25] Sat 2007-11-17 11:15:23: Esperando la conexión del socket... Sat 2007-11-17 11:15:23: * Conexión establecida (xx.yyy.51.30:3948 -] xx.xxx.13.172:25) Sat 2007-11-17 11:15:23: Esperando la iniciación del protocolo... Sat 2007-11-17 11:15:25: [-- 220-svr01.customerDomainHost.com ESMTP Exim 4.68 #1 Sat, 17 Nov 2007 11:15:29 -0500 Sat 2007-11-17 11:15:25: [-- 220-We do not authorize the use of this system to transport unsolicited, Sat 2007-11-17 11:15:25: [-- 220 and/or bulk e-mail. Sat 2007-11-17 11:15:25: --] EHLO zeus.XServer.com Sat 2007-11-17 11:15:25: [-- 250-svr01.customerDomainHost.com Hello zeus.XServer.com [xx.yyy.51.30] Sat 2007-11-17 11:15:25: [-- 250-SIZE 52428800 Sat 2007-11-17 11:15:25: [-- 250-PIPELINING Sat 2007-11-17 11:15:25: [-- 250-AUTH PLAIN LOGIN Sat 2007-11-17 11:15:25: [-- 250-STARTTLS Sat 2007-11-17 11:15:25: [-- 250 HELP Sat 2007-11-17 11:15:25: --] STARTTLS Sat 2007-11-17 11:15:26: [-- 220 TLS go ahead Sat 2007-11-17 11:15:26: SSL negotiation successful (TLS 1.0, 1024 bit key exchange, 128 bit RC4 encryption) Sat 2007-11-17 11:15:26: --] EHLO zeus.XServer.com Sat 2007-11-17 11:15:26: [-- 250-svr01.customerDomainHost.com Hello zeus.XServer.com [xx.yyy.51.30] Sat 2007-11-17 11:15:26: [-- 250-SIZE 52428800 Sat 2007-11-17 11:15:26: [-- 250-PIPELINING Sat 2007-11-17 11:15:26: [-- 250-AUTH PLAIN LOGIN Sat 2007-11-17 11:15:26: [-- 250 HELP Sat 2007-11-17 11:15:26: --] MAIL From:[ albertocarbone@XServer.com [mailto:albertocarbone@XServer.com] ] SIZE=23231 Sat 2007-11-17 11:15:26: [-- 250 OK Sat 2007-11-17 11:15:26: --] RCPT To:[jsoler@CustomerDomain.com] Sat 2007-11-17 11:15:30: [-- 550-Verification failed for [albertocarbone@XServer.com] Sat 2007-11-17 11:15:30: [-- 550-Called: 82.165.181.92 Sat 2007-11-17 11:15:30: [-- 550-Sent: RCPT TO:[albertocarbone@XServer.com] Sat 2007-11-17 11:15:30: [-- 550-Response: 550 Backscatter Protection detected an invalid or expired email address Sat 2007-11-17 11:15:30: [-- 550 Sender verify failed Sat 2007-11-17 11:15:30: --] QUIT --- End Transcript ---
in the last few months Ive got a blacklist warning from spamcop over my server sending bounces and now I find out one of my ips is listed at [url]for doing sender verify and bounces.
I think both of which are ridiculous to blacklist for and I really think most of the anti-spam blacklist people are nothing more then money making rackets. But I guess it seems reasonable to disable these things as it would save some resources.
Anyway what I need to do I guess is only do bounces for local users and disable sender verify. What is the best way to do this with exim? Every server I have to change is cpanel. Ive googled on this the last 2 days and cant find much info, Mailservers isnt my strong point for sure. Any advice Id appreciate.
UPDATE I found how to disable callouts [url]
Just trying to figure out how to disable bounces now
I had a server admin install a new drive in RAID 1 (mirrored drives). I'm not the best linux guy in the world... but is there a way either through linux, WHM/cPanel, etc. to check and verify that the drives are mirroring correctly? I just want to sleep soundly everynight knowing if a drive failed I'd have another drive up and going.
!verify = helo !verify = reverse_host_lookup in exim acl and drop message if helo is not passed. But one issue is this validates for users even having account in the server and trying to send mail using server account to someone else
I want to put validation for only incoming mails "to" this server
What i dont want is to validate the mails that authenticated smtp users send
if there was a way of remotely verifying my dedicated server architecture.
The hosting is done through our design company who then use a 3rd party for hosting a number of sites, and as such I don't have direct access to server control panels etc.
Short of just taking their word for the fact that we have the servers we're supposed to, I was wondering if there's any way I can be sure. We're supposed to have dual web servers plus a database server.
in the last couple of days we really have problem accessing web service, while ftp, ssh, work fine. While we getting connection time out, the load on the server is really load around .2 and get numerous e-mail from Cpanel that httpd is failling and try to restart.
How can i do to check and verify that there a DDOS attack?
What step can i do to possibly minimize DDOS attack?
I recently purchased a new Dedi server, and got 100 MBPS Uplink. Now, I'm uploading 16GB size of files into this server, and I have a suspicious feeling that this upload speed is not what they told me. For the very 1st day, I opened a ticket and they said that they upgraded it to 100 mbps. I saw this speed was faster immediately. On 2nd day, it went down to around same slow speed before. Since then, I kept opening a new ticket and they said it was done, or sometimes I am under DDos attack..? What? I don't even have the site up yet! How come there is DDos attack?
Anyway, today I was told that I'm getting billed for this 100 mbps uplink, because it's a new service. What a crazy thing going on here... I am so tired of this ticket game and just don't understand why they don't commit what they told me initially.
Can anyone please tell me how I can verify and prove that I am having this 100 MBPS Uplink speed? The only thing I can tell with my eyes is that I can see those FTP upload progress bar. When it's very fast to upload one file, I assume that I have right speed.
But is there any tool or command that I can execute on the server shell, and tell them what I get as a proof?
If you enable ssl in apache, you can verify a client certificate. If so apache will create a environment variable for you with the name 'SSL_CLIENT_VERIFY' with values 'NONE, SUCCESS, GENEROUS or FAILED:reason'. URL....What is the meaning of this different values?
We are facing an issue i.e "Can't verify server identity",When we hit the platform 'teampark.sogeti.com' from android mobile application.Whenever we hit teampark.sogeti.com from Mobile Application ( IBM connections android App), our initial request will hit our Reverse Proxy and Validates the user certificate and forward it to the next level.We are using Apache 2.2.9 as our Reverse Proxy.
My .htaccess file redirects (rewrites) all .html to .php... I need to add Google's file in order to verify my account (Webmaster Tools) but it can't find the file because of my .htaccess.