exim spam mails email id compromised bulk mailing

 remove mail id from exim_accept_senders


vi /etc/exim_accept_senders


and add here

and vi /etc/exim_reject_senders


remove all ips from here


/etc/virtual/pophosts



systemctl restart dovecot


systemctl restart exim



tail -f /var/log/exim/mainlog

ser) [195.133.40.218] F=<b.prashant@drushti.in> rejected RCPT <genijanvier@yahoo.com>
2021-07-29 13:03:58 H=(User) [195.133.40.218] F=<b.prashant@drushti.in> rejected RCPT <marilynlh@comcast.net>
2021-07-29 13:03:58 H=(User) [195.133.40.218] F=<b.prashant@drushti.in> rejected RCPT <barbthorne@live.ca>
2021-07-29 13:03:58 H=(User) [195.133.40.218] F=<b.prashant@drushti.in> rejected RCPT <mario.natividad@appliedmetering.com>
2021-07-29 13:03:58 H=(User) [195.133.40.218] F=<b.prashant@drushti.in> rejected RCPT <marinainla@aol.com>
2021-07-29 13:03:58 H=(User) [136.144.41.190] F=<b.prashant@drushti.in> rejected RCPT <favpor@aol.com>
2021-07-29 13:03:58 H=(User) [136.144.41.190] F=<b.prashant@drushti.in> rejected RCPT <favuoragurma@ymail.com>
2021-07-29 13:03:58 H=(User) [136.144.41.190] F=<b.prashant@drushti.in> rejected RCPT <fawad_ulhaq2002@yahoo.com>
2021-07-29 13:03:58 H=(User) [136.144.41.190] F=<b.prashant@drushti.in> rejected RCPT <favreisatrader@yahoo.com>
2021-07-29 13:03:58 H=(User) [45.229.102.56] F=<b.prashant@drushti.in> rejected RCPT <miguelycris2003@hotmail.es>
2021-07-29 13:03:58 H=(User) [45.229.102.56] F=<b.prashant@drushti.in> rejected RCPT <jamaldude@yahoo.com>
2021-07-29 13:03:58 H=(User) [45.229.102.56] F=<b.prashant@drushti.in> rejected RCPT <jam1@live.fi>
2021-07-29 13:03:59 H=(User) [195.133.40.218] F=<b.prashant@drushti.in> rejected RCPT <barbreyesleggett@rogers.com>
2021-07-29 13:03:59 H=(User) [195.133.40.218] F=<b.prashant@drushti.in> rejected RCPT <bardelli.m@videotron.ca>


blacklist all IPs 


iptables -I INPUT -p tcp -s 195.133.40.218 -j DROP
iptables -I INPUT -p tcp -s 136.144.41.190 -j DROP
iptables -I INPUT -p tcp -s 45.229.102.56 -j DROP
iptables -I INPUT -p tcp -s 77.247.110.118 -j DROP

431 authentication fails

2021-07-29 13:08:37 login authenticator failed for (webmail.drushti.in) [::1]: 435 Unable to authenticate at present (set_id=d.rushikesh@drushti.in): The email send limit for drushtiin has been reached

reset the user in DA

drushtiin


Exim Remove All messages From the Mail Queue
  1. To print a list of the messages in the queue, enter: # exim -bp.
  2. To remove a message from the queue, enter: # exim -Mrm {message-id}
  3. To remove all messages from the queue, enter: # exim -bp | awk '/^ *[0-9]+[mhd]/{print "exim -Mrm " $3}' | bash

Comments

Post a Comment

Popular posts from this blog

cpanel exam CPSP Answers

 Which of the following options best describes the role of Shared Hosting on a web server? Providing hosting for a single website owned by different people on multiple servers. Providing hosting for a single website owned by one person on one server. Providing hosting for multiple websites owned by different people on one server. Providing hosting for multiple websites owned by one person on one server. 3 Which of the following capabilities can a cPanel account user perform easily from within the cPanel account interface without the aid of a system administrator? File and configuration management. Relocating the physical server. Upgrading server hardware and equipment. Installing new database software. 1 File and configuration management. Which of the following options best describes a core benefit to using cPanel & WHM, as a web hosting provider operating on a cPanel & WHM environment? cPanel users are able to create new virtualization resources to help host their web appl...
Read more

How to install zimbra collaboration suite 8.8.11 on CentOS 7

Check system requirements  https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0/Single_Server_Installation#System_Requirements prerequisites Before we get started, here are a few things that are required before we proceed with the installation. A clean installation of Centos 7 A Fully Qualified Domain (FQDN) for your server(Example mail.geekybum.com) An external DNS server with both A and MX records for your server to point to your Zimbra mail server IP Address A static IP Address assigned to network interface. Step 1: Root login to server through SSH Step 2: Install required packages for zimbra coloboration suite installation yum -y install unzip net-tools sysstat openssh-clients perl-core libaio nmap-ncat libstdc++.so Initial server setup To get started we need to configure a hostname for our server and a static IP address. vi /etc/hosts 135.125.30.56 mail.geekybum.com mail Replace the system hostname and FQDN values accordingly in order to match your ow...
Read more

awstats installation

Set Up AWStats for Nginx on Ubuntu sudo apt-get install awstats add access log file to generate stats using this server { # ... all your other config ... access_log /var/log/nginx/yourdomain.com.access.log ; # ... all your other config ... } /etc/nginx/sites-available vi awstats.parleproducts.com.conf cd /etc/awstats/ vi awstats.parleproducts.com.conf #path to your nginx log file LogFile="/var/log/nginx/parleproducts.com.access.log" # Domain of your vhost SiteDomain="parleproducts.com" # Directory where to store the awstats data DirData="/var/lib/awstats/" # Other domains/subdomain you want included from your logs, for example the www subdomain HostAliases="www.parleproducts.com" # If you customized your log format above add this line: LogFormat = ""%host %other %logname %time1 %methodurl %code %bytesd %refererquot %uaquot"" # If you did not, uncomment and use this line: #...
Read more