We have a vpn that is accessible to anyone. We already block port 25, 587 and 465. But I am still receiving spam reports. I believe that the users of my vpn is infected by a virus or something that sends spam. Are there any other ways that spammer send spam mails without using the smtp ports?
My guess is that they are trying to send it by accessing a webmail. Have you heard of anything like that? how to block spam?
I just setup SpamAssassin and what not following this tutorial
[URL]
I am using CentOS 5.3. I was half way through that and got an email that had ***SPAM*** in the subject. Haven't received any more. First of all I want to know if spam will still get delivered, and just have a modified subject. Second, I want to know how to set it up so Spam goes to a user's spam mailbox (Virtual Users). And third of all, is it possible to disable spam filtering on a user basis, preferably using MySQL tables? Is it possible for users to mark a message as spam, and all further messages sent from that address will be sent to spam folder but only for that user?
EDIT: Yes spam is getting delivered with a modified header, on the server site, how can i deliver to spam folder? how to create IMAP virtual mailboxes on request without having to send an email to them first? Using virtual users with Courier Imap
I just saw that my network is slowed so I watches the /var/log/squid/access.log where I get this line continuously....
[Code]....
I thought that someone running any script so I disconnect all my LAN connection (simply removed the local lan cable) but I saw the connections is going on....so I watch the processes on proxy server but nothing suspicious....So I change my static IP and the spamming stops (I say it is spam b'coz the IP 203.188.197.10 is of yahoomail.com ) but I when I am putting my OLD ip back the connection starts again......I want to put back my old static IP b'coz I have configured it for many services. Is there any spyware on my machine or someone configured my IP?
All the emails I send from my linux server end up in the recipient's spam folder....Although I have tried many howtos etc and checked all blacklists... It doesn't work...
View 3 Replies View RelatedWe have a spam in our network and we installed antivirus in all our systems and cleaned the virus from all pc's after that i had removed my ip from the database of blocked ip's but still my ip is blocked for sending spam i don't know from which pc the spam is going on the internet.
so i have a question that my proxy server is redhat linux and as a newbie i don't know the command's to find out which pc is creating large bandwidth to the internet. If you tell the command how to see which pc is sending spam then i will discard that pc. Also i want a strong firewall to stop spam activities.
The mail server keeps getting locked up with tens of thousands of spam emails.So, i followed some instructions similar to this : [URL]I can clear the queue spams, easy, but after an hour or so the server is dead again.. not receiving emails and not sending out emails.
Code:
Received: (qmail 356 invoked by uid 509); 4 Mar 2011 21:39:10 +0800
Received: from 125.110.124.51 by host1.wemotor.com (envelope-from <oiazfkdvd@yahoo.com.tw>, uid 508) with qmail-scanner-1.25-st-qms
Received: from unknown (HELO 202.46.116.119) (125.110.124.51)
[code]....
I currently have the following email server set up:
Postfix with mysql backend
Dovecot
clamav
spamassassin
amavisd
And it all works great. However I would like it for amavisd to forward all the marked spam into a folder on each user account, but I cannot figure this out.
I am using postfix as spam Mailscanner to protect my mail server running sendmail. The problem is that when I forward an email from MailScanner mail me back with the following error:
<postmaster@localhost.@mydomain.com.>... Real domain name required for sender address (in reply to MAIL FROM command))
Jul 27 13:15:59 smtp postfix/local[28465]: C68AC1000001: to=<root@smtp.mydomain.com>,
[code]....
After installing postfix on my server , all emails sent by a PHP class that i built , are received to spam folder , no matter what i do .am not an expert , except in PHP , the class i built works fine everywhere else except on this server , so i think the problem might be from the server it self ?some told me wrong configuration/software on my server , others told me wrong DNS stuff . actually i don't understand the DNS stuff , and am not an expert in linux softwares and services but i cann install/configure them , so could anyone please check the DNS for problems ?
View 3 Replies View RelatedBecause our visitors/customers are short term, and may be configured incorrectly with their own mail servers we automagically redirect all port 25 traffic going to internal IP's to our own mail servers while on our network.(postfix on centos 5.6)While I have taken some measures to prevent it from spamming, I would greatly appreciate some assistance.I will be putting in clamav, but I haven't configured it yet with the mail.I am using postfix, but can also put on procmail or even spam assassin
View 6 Replies View RelatedAmavis-new on my mail server is marking my emails as spam, like so:
Quote:
Apr 16 12:15:52 myserver amavis[30979]: (o3GIFltt008868) Blocked SPAM, AM.PDP-SOCK [xx.xx.xx.xx] [xx.xx.xx.xx] <myemail@mydomain.com> -> <myfriend@hisdomain.com>, quarantine: spam-w1hxRn9Pr4P6.gz, Message-ID: <4BC8A9E8.2070108@mydomain.com>, mail_id: w1hxRn9Pr4P6, Hits: 7.844, size: 6763, 1986 ms
The mail server is not on my local LAN, and all the primary users are roaming. They connect via TLS auth, which is required to make a sendmail connection to my server. I could whitelist all addresses in my domain, but then anyone spoofing my email wouldn't be seen as spam. How do I simply tell amavis-new and/or sendmail not to spam scan TLS authenticated users?
I have a mail server (dovecot+postfix) on Centos with amavis/clamav installed and working. It correctly identifies spam as such and puts it in the headers. I want it to move those suspected spam messages into a spam folder. I do have this working on an older debian server that I didn't setup. If someone could point me in the direction if where that config might be. I can't find it in any of the mail config files.Could there be a seperate package doing this?
View 3 Replies View RelatedI'm setting up email gateway using Postfix, Amavisd-new, ClamAV and SpamAssassin on Opensuse 11.1. Everything seems okie, but I can't have messages with added spam headers, such as:
X-Spam-Flag: NO
X-Spam-Score: 0.233
X-Spam-Level:
X-Spam-Status: No, score=0.233 tagged_above=-10 required=6.6
tests=[ALL_TRUSTED=-1.8, AWL=0.536, BAYES_50=0.001,]
When I try to debug amavis, I can see that SPAM-TAG, <abc@yahoo.com> -> <celeron@domain.com>, No, score=5.406 tagged_above=-999 required=6.2 tests=[LOCAL_DRUG=4, NO_DNS_FOR_FROM=1.407, NO_RELAYS=-0.001] but they don't add to email messages. I've configured amavisd-new with $sa_tag_level_deflt = -999 to add spam headers at all but not successful.
I need to implement a form of filtering. Current topology is like so:
Internet -> Smoothwall -> MS Exchange server (w/ OWA) -> Clients
So I need to enable transparent spam filtering on the smoothwall system, which is a full fledged Linux system. There are no 'free' modules available for smoothwall that enable spam filtering. And due to the monetary constraints of the project I'm working on, something free is required.
I don't have any experience with this - I've done a couple of searches and came up with "SpamAssasin", but I can't find any relevant guides that allow transparent scanning - they all assume the mail is stored on THAT server.
So I'm here to ask the more experienced people what sort of packages will enable this functionality? Would like something that has a WebUI, but that's not absolutely necessary.
My postfix server has been working great for the last 1-2 years. Lately the number of spams encreased (from 1-2 every day to aprox 8-10 every day per domain for some domains ).I post here the output of postconf -n. Maybe someone gives me some advices about what cat I change or how can I optimize. I must recognise that I don't fully understand details of how postfix and all the restrictions works together, but I will document every advice.
View 4 Replies View RelatedMy client has finally had enough of being attacked via SPAM/Viruses and having his single email account for his company being destroyed. Since it is a single account and he does not want to add additional accounts or create a new one(mail is hosted by ISP), I wanted to ask the forum on their opinion on using Fetchmail to download the POP3 mail and having it piped through SMAM Assassion or DSpam and or CLAM_AV or F-PROT. In addition to that I am going to use a corporate strength anti-virus such as F-prot(Been using for years) and really put this email through a microscope. I also was thinking of just blocking out all domains other than his clients list of domains so in other words block all and allow just the domains that we know are valid and are only from his clients. It is super restrictive but what I believe will end his issue.
View 7 Replies View RelatedI have postfix installed for a while now. It seems as though my server is sending out spam to other people which is really bad...I got emails like this one:
Code:
Delivered-To: email@provider.com
Received: by 10.223.107.17 with SMTP id z17cs2705fao;
[code]...
I have set up a couple of postfix servers for my domains, but the only thing I am missing now is this: How to block the public sending mail from my email to my email? I have managed it with SPF, but surely there must be a better way, that returns "relay not allowed" to the client. The SPF method costs too much, since it must make a dns request for each mail. So far, I have not gotten many of these mails, unless when testing my mailserver, but as I see it, anyone should not be allowed to send mail from abuse@mydomain.com to abuse@mydomain.com.
Somebody must have thought about this a long time ago, and there is simply that little line in main.conf that I'm missing.. My setup is this (virtual): I have a primary mx, with postfix, courier IMAP/POP3 server, a user database, and sasl via saslauthd. I also have a secondary mail server (backup mx) with no sasl auth, but with a copy of the mail users in the virtual tables, but added as relay_* users instead.
Spamassassin and SPF testing is replicated too, so most of the stuff should work, but I simply cannot find a setting in Postfix that denies someone to mail FROM my address TO my address. When mailing from my address and out in the open, they are required to authenticate, but not when using one of my my domain addresses, and also targeting my domain addresses.
As said, It is possible with a strict SPF setting, but that is at a cost for every lookup. It would be quicker for postfix to lookup the sender and the recipient in the relay/virtual tables, and deny if both addresses were in the recipient tables, and sender is not authenticated.
Am using atmail server but recently i have been facing the problems of spams which caused my ip address to be blacklisted to some dnsbl check. am using below dnsbl to filter spams to my atmail
View 1 Replies View RelatedI followed this how to document [URL] to install postfix, Amavisd, SpamAssassin and ClamAV. My postfix installation is working fine and I can send and receive emails fine. However, it looks like SpamAssassin is not catching any emails. Emails do get passed over to Amavisd as I can see in the logs but ALL Messages comes out CLEAN without being tagged as spam.
As per the document, I did test by sending a test virus email
sendmail -i your-address@example.com < sample-virus-simple.txt.
This is caught and NOT let through so ClamAV is ok but when i send
sendmail -i your-address@example.com < sample-spam-GTUBE-junk.txt
it does get delievered without being detected as SPAM or tagged as SPAM.
As I said, I have followed the documentation dot by dot and hence do not have spamassassin starting up as a service but i guess amavisd starts it within itself as a module.
Also, my postfix version is the one that supports mysql virtual tables which I got from rpmforge.
I was wondering if there was some kind of anti-spam proxy available for debian, that could serve as a layer between my ISP's mailserver and my email client. Something light, as it needs to be installed to a guruplug server with not much storage available. It would be great if I don't need to configure a fully fledged mail server but if it can function on it's own, only filtering spam messages. I already found assp and qpsmtp, but I find these very difficult to setup and assp is like huge.
View 1 Replies View RelatedI am new comer in this forum and the beginner on freeBsdI have a problem on how to implement the spam filter program on mail server, the problem is i have no idea on how to implement and test the spam filter program on the mail server and where should i put the program? is it in pop3?
View 3 Replies View RelatedI all ready have a Debian spam filter setup using Postgrey, Postfix, Amavis-new, spamassassin, and ClamAV this box is a relay spam filter server to our SBS Exchange Box. Currently all Virus laden email is disposed of, and all spam that is not thrown out gets sent to a spam filter account on the exchange server that I check periodically. This is inefficient and I'd rather not do this, additionally I'd like users to have control over their own white lists and so forth.
I am willing to start from scratch on this as the spam filter is running in a VM environment I can plug a new one in and be running in minutes. The issue I am having is that I cannot find any information on how to do this. Plenty, including HOWTOs, on how to do this with local users on the spam box and also have it relay to another server, but not how to make quarantine folders for relay recipients that are access
I set up an exim4 server successfully and was able to send/receive mail! I fired off a couple emails to my friend and never got a response. Oh well, I thought, must be because my domain name might be considered spam.Flash forward to today and I get an email from the people who host my server, telling me that I have left my exim4 relay open. Looking through some of my users' email, I see a series of messages with the subject 'Message frozen':
Code:
Message 1QCCQJ-0004FP-OY has been frozen (delivery error message).
The sender is <>.
[code]....
I'm new here and I'm sure this question has been thrown around a lot but I just couldn't find a solution. I have a networking website I've setup and we need to send notification mails to our members depending on activity related to their profiles(messages, comments etc).We are hosting the site on Centos5.6 with VirtualMin and are using Postfix as our MTA. We also use google apps for email on the site. Heres the problem, the mails go through for some gmail users but more often than not, they end up in gmail,hotmail and yahoo spam.We've setup the appropriate SPF codes on the server, DKIM and rDNS works fine.v=spf1 ip4:xx.xx.xx.xx a mx include:_spf.google.com ~all Below is a sample email that goes directly into gmail spam. I've replaced the actual values with dummy text (Ip, Domain etc)
Delivered-To: my.email@gmail.com
Received: by 10.143.165.5 with SMTP id s5cs223598wfo;
Fri, 15 Apr 2011 08:38:22 -0700 (PDT)
[code]...
I need help with header_check filter on postfix. In the last week mail users received a spam e-mail without subject line and I don't know what is the way to reject this. This is the example of message header:
From: "example@example.com"
Date: September 16, 2010 9:07:43 AM GMT-04:00
To: <example@example.com>
I want to reject e-mails that don't have Subject line
It's possible to configure Postfix in order to check spam only for outgoing email?
View 2 Replies View RelatedI followed this How To (https://help.ubuntu.com/community/Postfix) in order to add smtp authentication to my Postfix installation used as spam filter for my exhange server, and it'seem all ok; the only thing that I don't understand is where I list all the users (with passwords) that I authorize to send mail through my server...
View 3 Replies View RelatedCurrently I'm having a problem with a box which keep sending spams all over the world. yesterday we upgraded some drupal modules (which can send email), and the spam quantity reduced. But still some spams keep on going out from our server. Some of them even have attachment.
Some of them sent using accounts that never exist at our server (e.g. strager@mydomain.com), and some of them are from 'nobody'. what to check, or where to look. I've check the MX-Records and there was no strange forwarders. Really stuck here...
Yesterday i run a postfix everything works fine and today it hangs up. if i dial "telnet localhost 25" i get (before day i get 220 answer and ordinary hello):
Code:
Trying 62.197.207.43...
Connected to trons.sk.
Escape character is '^]'.
and nothing go far.
[Code]....