1 Topic by SirhcdP

  • SirhcdP
  • Member
  • Offline
  • Registered: 2019-10-17
  • Posts: 5

Topic: Receive duplicate emails from third party.

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
1.4.0 MARIADB edition
Downloadable installer
CentOS Linux release 7.9.2009 (Core)
MySQL
Nginx
iRedAdmin

Good day

When a user emails a message to another user the same message gets duplicated but it is somebody else that is not part of our email server that sends the duplicate message with a new attachment. The wording and signature are exactly the same as the original message.

I would appreciate it if someone can help me to solve this problem.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 908

Re: Receive duplicate emails from third party.

You need to describe this more detailled, duplicated where? sent or inbox of user b?
sending to same domain, or foreign domain?

somebody else that is not part of the email server (i guess the domain in this case?)

wording and signature are the same? this cant be, since the signature is generated useing a private key, which i asume is not leaked

3 Reply by SirhcdP

  • SirhcdP
  • Member
  • Offline
  • Registered: 2019-10-17
  • Posts: 5

Re: Receive duplicate emails from third party.

Cthulhu wrote:

You need to describe this more detailled, duplicated where? sent or inbox of user b?
sending to same domain, or foreign domain?

somebody else that is not part of the email server (i guess the domain in this case?)

wording and signature are the same? this cant be, since the signature is generated useing a private key, which i asume is not leaked

It is duplicated in the inbox, by the signature I meant the signature a user adds at the end of the email, the duplicate is from a foreign domain, our customers and service providers are also getting these emails that look like it come from us. Users are also receiving old emails that look like it come from a valid email address.

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: Receive duplicate emails from third party.

I don't understand the situation. it sounds like your server has been hacked and generates a copy of each sent / received email.