1 Topic by melaleuca5

  • melaleuca5
  • Member
  • Offline
  • Registered: 2011-10-28
  • Posts: 60

Topic: Spam Issues IN mailq

==== Required information ====
- iRedMail version: Iredmail 8.3
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): ldap
- Linux/BSD distribution name and version: redhat
- Related log if you're reporting an issue:
====

Getting lots of these msg on mailq

C61E738009    21522 Tue Nov 20 07:15:50  MAILER-DAEMON
(host eforward2.registrar-servers.com[209.105.246.195] said: 450 4.1.1 <Free.Score.Check.360@Lakeherwoodspeed.info>: Recipient address rejected: unverified address: unknown user: "free.score.check.360@lakeherwoodspeed.info" (in reply to RCPT TO command))
                                         Free.Score.Check.360@Lakeherwoodspeed.info



Not sure how to stop this

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by melaleuca5

  • melaleuca5
  • Member
  • Offline
  • Registered: 2011-10-28
  • Posts: 60

Re: Spam Issues IN mailq

I followed one of the email to see what is happening but not sure.

http://pastebin.com/TrZBKdK7

3 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: Spam Issues IN mailq

Any related log in Postfix log file (/var/log/maillog)? Please post related full SMTP session in log file.

4 Reply by melaleuca5

  • melaleuca5
  • Member
  • Offline
  • Registered: 2011-10-28
  • Posts: 60

Re: Spam Issues IN mailq

I have included the related logs with some new records both mailq and also following that email on the maillog.

Looks like most of them have from=<>


http://pastebin.com/8xXdswfw

5 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: Spam Issues IN mailq

- Maillog shows emails were sent to "mailreturn@smtp8.ymlpsrv.net", is this your domain and user?
- Did you check whether there's some system account sent many emails?
- Do you know these email addresses shown in mailq? Maybe someone hacked your server and logged as system user to send spams.