Skip to main content

All Questions

Tagged with
Filter by
Sorted by
Tagged with
0 votes
0 answers
37 views

Configure fail2ban to parse multiple log lines, e.g. Postfix mail rejects

I want to to block local authenticated mail users who generate spam, i.e. disable their SMTP access for a while as one of several countermeasures against hijacked accounts and malware. To accomplish ...
Jens's user avatar
  • 149
1 vote
0 answers
23 views

Postfix configuration to block spammer domain isn't working

I have an Ubuntu 22.04 cloud VM with Postfix 3.6.4-1ubuntu1.3 installed that I largely use for receiving e-mails sent to addresses at my personal domain that I provide when signing up for less-...
jwodder's user avatar
  • 117
0 votes
1 answer
56 views

Increase in spams through website contact forms after change of server

I recently moved my website from Hostgator to an Amazon Web Services' EC2 instance. From a few days later people/bot started posting spam messages in the forms that are on the website. Is there ...
manish.mandal's user avatar
1 vote
2 answers
105 views

Apache "ghost" requests?

I lack the ability to formulate my problem, otherwise I'd probably find the solution. I notice there are quite a number of pointless requests in my access log :~/$ cat /var/log/apache2/access.log | ...
php_nub_qq's user avatar
0 votes
0 answers
43 views

How do I ensure that only my e-mail server is sending e-mail through my network?

This is a follow-up to Our IP was listed by Spamhaus - how can we prevent this from happening again? - unfortunately, it is happening yet again. I was thinking that people could have malware on their ...
Will Matheson's user avatar
-1 votes
1 answer
434 views

Ubuntu 16.04 Postfix works, but email goes to SPAM

Hello i follow this guide to install Postfix https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-postfix-as-a-send-only-smtp-server-on-ubuntu-18-04 and i added SPF, dmarc ...
lablnet's user avatar
1 vote
2 answers
455 views

Our IP was listed by Spamhaus - how can we prevent this from happening again?

I'm the technical assistant at a small-town public library where we run our own e-mail. If it matters, it's Postfix on an Ubuntu 18.04 box. Gateway / firewall is a 16.04 box with port forwarding set ...
Will Matheson's user avatar
0 votes
1 answer
1k views

How to cut-off spam (postfix+amavis-new)

I'm using postfix+dovecot+amavis-new+clamav+spamassassin+postgrey on my Ubuntu based VPS. Since some days i'm receiving a lot of spam, with a low level of spam score in headers. Common for all spam ...
msc3's user avatar
  • 1
1 vote
2 answers
717 views

Logwatch Emails marked as spam; how to stop reverse DNS on bot hosts?

Is there a way to alter the Logwatch settings such that it stops performing reverse dns name resolution on all the hosts which tried to probe the server or were blocked? These URLs are causing the ...
RedScourge's user avatar
0 votes
0 answers
606 views

Mail command in AWS EC2 ubuntu instance is sending emails to spam folder

Recently, i have upgraded my EC2 ubuntu instance from t2.micro to t2.medium in AWS to fight space related issues. Though the upgrade went well, mail command which was working fine in t2.micro started ...
Abhishek Somani's user avatar
1 vote
2 answers
5k views

All outgoing mail is marked as spam by gmail [duplicate]

All my emails sent from my SMTP server (created with VespaCP) is being marked as spam by gmail. DNS and DKIM is setup correctly. By using isnotspam.com, I have figured out that the reason is ...
Celsiuss's user avatar
  • 121
-4 votes
1 answer
95 views

Restrict users to send emails only from a particular IP address to reduce SPAM [duplicate]

How to restrict people to send emails from my email domain to reduce SPAM. We are using postfix in ubuntu. Is there any parameter which I can configure in main.cf to achieve this? Any help will be ...
a3765910's user avatar
  • 101
1 vote
1 answer
63 views

Forcibly disconnect spammers

I have Postfix, Dovecot and Amavis on my Ubuntu server. Recently, I get every 4 minutes a connection from IP 155.133.82.96, which appears to be Windows XP and maybe has a virus. Anyway, I found the ...
user avatar
3 votes
2 answers
1k views

Understanding exim4 outgoing message logs. Am I a spammer?

Today I got many spammy emails into my mailbox, I looked in exim4 logs and I found some suspected activities. I would like to understand the serverity of this attack, if I got spammy mail I can ...
Tobia's user avatar
  • 1,344
4 votes
2 answers
5k views

Firewall rule to only allow Postfix to send email through SMTP on port 25

As suggested in How do you detect a spambot on your network? how can I setup firewall rule to allow only Postifx to send emails using SMTP on port 25 and disallow all other applications to send on ...
user5858's user avatar
  • 283
3 votes
4 answers
2k views

False IP blacklisting on CBL and Spamhaus ZEN

I've gone thru this: Spamhaus XBL keeps adding my IP I'm managing the server 23.239.30.81 on Ubuntu using Postfix. Since last 6 months or so I started forwarding all my: Cron Daemon logs Postfix ...
user5858's user avatar
  • 283
1 vote
1 answer
206 views

How To Only Restrict PHP5/Apache to Send Mail Only To Local Users

I need some help. I am running lastest stable Ubuntu which hosts Apache/PHP5 and also delivers email. I host some WordPress sites for other users and have been waging a war for months now combatting ...
ThaKidd KG5ORD's user avatar
-3 votes
1 answer
927 views

Postfix - Allow emails to virtual domains but block spam?

My Postfix is set up with virtual domains. This allows people to send an email to *@mydomain.com and it'll be forwarded to my gmail account. Basically the end goal is to simply allow people to email ...
jblz's user avatar
  • 215
0 votes
1 answer
92 views

No-Listing policy with postfix (ubuntu)

I'm running an experiment on a virtual machine. In the virtual machine I've installed ubuntu and Postfix as a mail server. I followed the guide: https://help.ubuntu.com/community/Postfix , only the "...
Snakethesniper's user avatar
0 votes
2 answers
604 views

How to check whether my server turned into a spamming machine?

I am suspecting something is sending a plenty of mails from my server without my knowledge. I'd like to check whether my machine turned into a spamming server. What is the easiest way to do this? ...
captain lizard's user avatar
0 votes
1 answer
129 views

Spam e-mail tracing

I have this issue where I receive on my server admin e-mail failure notices to a lot of e-mails that I or my hosted domains did not send. The machine is an Ubuntu with Plesk 11. For e-mail I use ...
Mike's user avatar
  • 113
-1 votes
2 answers
3k views

Postfix is Sending Spam [duplicate]

I have an Ubuntu 12.04 server, hosted on AWS, that powers a dozen WordPress installations using Nginx and php5-fpm. The problem just began one day. My server was down. Panic! Whenever I turned it on ...
Ore4444's user avatar
  • 127
3 votes
4 answers
916 views

Spamming from my Linux server

Hi I was wondering if anyone could help. I got a email from my host company that there are some weird traffic coming from my server. A quick look into the log file revealed the sample log below. There ...
Helen's user avatar
  • 953
3 votes
2 answers
2k views

postfix sending mails to unknown addresses

I was checking my munin tables and saw a huge list of deferred mails in postfix and looking into /var/log/mail.log gave me an idea: I am sending mails to unknown mail addresses: Dec 23 08:21:32 ...
Riccardo's user avatar
  • 131
0 votes
2 answers
585 views

Server sending out SPAM [duplicate]

Update: It does seem as the server is not compromised, but is used as relay server. Now I'm trying to figure out how to disable this. I have server running Ubuntu 12.04 LTS with several domains ...
user189603's user avatar
1 vote
1 answer
607 views

Dovecot Forward Spam

I was wondering if anyone had any knowledge on how this idea can be done. It's not a requirement but more of an idea I came up with that I don't know how to word my google searches to find out if it's ...
CP510's user avatar
  • 189
0 votes
2 answers
347 views

DKIM signed mails go to spam folder and do not show key icon

I have installed DKIM for my sendmail and I have also configured it. But I still see that my emails are being considered as spam by gmail. Also, I do not see the "key" in the emails (even if I unspam ...
Abhishek's user avatar
  • 423
8 votes
2 answers
14k views

Optimal parameters set for Postfix "smtpd_recipient_restrictions"

we've inherited the DNS from another ISP and now our mail server is bombed by about 1000 emails per minute, 99.99% of these emails are just spam. We're trying to optimize the filtering/rejecting the ...
Igor's user avatar
  • 193
0 votes
2 answers
297 views

How to avoid outgoing emails to be flagged as spam by google? [duplicate]

Possible Duplicate: Best Practices for preventing you from looking like a spammer I use Exim4 as MTA on Ubuntu server. The problem is that all outgoing emails are being flagged as spam by google ...
alfish's user avatar
  • 3,177
0 votes
1 answer
1k views

Sending mail through local MTA while domain MX records point to Google Apps

My domain's email is managed by Google Apps, so that domain users get Gmail and Calendar, etc. But I also want to be able to send applicative notifications to users outside the domain via email (e.g. "...
Assaf Lavie's user avatar
0 votes
2 answers
441 views

Debugging the source of rogue emails coming from my domain?

Somehow, rogue spam emails are being sent through my domain from [email protected]. I'm using google apps to manage email, and I see no test user account, so I'm not sure what could possibly be ...
Stefan Kendall's user avatar
0 votes
3 answers
1k views

My system is sending spam, where to start fixing it?

One of my smaller webservers appears to be sending out spam. It is a Ubuntu 8.04 system with Plesk as a configutation interface and qmail as the mailserver. How to I go about identifying the spam-...
mniess's user avatar
  • 373
1 vote
3 answers
408 views

Blocking a distributed, consistent spam attack? Could it be something more serious?

I will do my best to try and explain this as it's strange and confusing to me. I posted a little while ago about a sustained spike in mysql queries on a VPS I had recently setup. It turned out to be a ...
mattmcmanus's user avatar
6 votes
1 answer
4k views

How do I do an exact whois search?

When I execute the following whois command on my Ubuntu server, I get all sorts of other domains which contain google.com in the name, but clearly aren't owned by google. As this appears to be some ...
brianegge's user avatar
  • 1,074
5 votes
7 answers
16k views

How to check my linux server isn't spamming

I'm worried about dodgy php scripts or other malicious software on my linux server sending out spam. Or maybe I left an open relay What are the ways to check I'm not sending any spam out?
aidan's user avatar
  • 615
0 votes
1 answer
964 views

plesk 9 spamassassin server wide blacklist via cron?

we're running ubuntu 8.04 LTS and plesk 9.2 our simple task is to set up a periodic black list for spamassassin, e.g. using this script .. #!/bin/sh #! Script by AJR to update local spamassassin ...
user avatar
1 vote
1 answer
321 views

Testing email system, spam injection tool recommendations?

is there any free spam injection tools available on ubuntu for testing the email system ? i would like to get free Spam inject tools for testing mail systems which i am part of development Edit 2 : ...
joe's user avatar
  • 329