1

Topic: Accounts sending spam

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.3.2 MARIADB edition
- Deployed with installer
- Linux/BSD distribution name and version: Ubuntu 20.04
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MN6pt54RyzFmG2: from=<almacen.rubiales@discon.com.co>, size=4653, nrcpt=1 (queue active)
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MN5LV4tZnzFltw: from=<almacen.rubiales@discon.com.co>, size=30468, nrcpt=1 (queue activ>
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MN6nJ4sZjzFmGR: from=<almacen.rubiales@discon.com.co>, size=4478, nrcpt=1 (queue active)
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MN42f56SYzFlnT: from=<almacen.rubiales@discon.com.co>, size=30263, nrcpt=1 (queue activ>
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MNGYf4fyqzFqcp: from=<almacen.rubiales@discon.com.co>, size=8262, nrcpt=1 (queue active)
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MN6n84z0gzFmG0: from=<almacen.rubiales@discon.com.co>, size=32893, nrcpt=1 (queue activ>
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MNB1w4mwJzFnXw: from=<almacen2.huboriente@discon.com.co>, size=95088, nrcpt=1 (queue ac>
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MNB1t4fV2zFnY0: from=<almacen2.huboriente@discon.com.co>, size=84830, nrcpt=1 (queue ac>
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MN8fb4rtRzFmv1: from=<almacen.rubiales@discon.com.co>, size=8202, nrcpt=1 (queue active)
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MNGYj4xKhzFqcc: from=<almacen.rubiales@discon.com.co>, size=5289, nrcpt=1 (queue active)
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MN3sp4kK1zFlkn: from=<almacen.rubiales@discon.com.co>, size=8380, nrcpt=1 (queue active)
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MNF8c4wmDzFqNQ: from=<almacen.rubiales@discon.com.co>, size=5178, nrcpt=1 (queue active)
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MNJH84l3HzFrST: from=<almacen.rubiales@discon.com.co>, size=32530, nrcpt=1 (queue activ>
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MNCdN6znszFpZN: from=<almacen.rubiales@discon.com.co>, size=4586, nrcpt=1 (queue active)
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MNB0M73cGzFnV4: from=<almacen.rubiales@discon.com.co>, size=5166, nrcpt=1 (queue active)
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MNF9572cxzFqP6: from=<almacen.rubiales@discon.com.co>, size=30323, nrcpt=1 (queue activ>
Sep  9 18:20:29 disconmail-mayo-2022 postfix/smtp[1183294]: 4MNB1J1jZszFnX7: host mx00.t-online.de[194.25.134.8] refused to talk to me: 554 IP=15>
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MNCcS75RnzFpXx: from=<almacen.rubiales@discon.com.co>, size=5069, nrcpt=1 (queue active)
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MN3tT704zzFlky: from=<almacen.rubiales@discon.com.co>, size=31012, nrcpt=1 (queue activ>
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MLpvY70gPzFl1Y: from=<almacen2.huboriente@discon.com.co>, size=7651, nrcpt=1 (queue act>
Sep  9 18:20:29 disconmail-mayo-2022 postfix/qmgr[1525]: 4MNCct75XxzFpYl: from=<almacen.rubiales@discon.com.co>, size=5164, nrcpt=1 (queue active)

I disabled the accounts but anyway they appear to be sending emails.
Please help-me

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Accounts sending spam

soporteDiscon wrote:

I disabled the accounts but anyway they appear to be sending emails.

You should also remove queued messages in Postfix queue with "postsuper -d <queue-id>".