Results 1 to 6 of 6

Thread: Spam / Deferred queue

  1. #1
    ryandball's Avatar
    ryandball is offline Senior Member
    Join Date
    Dec 2007
    Location
    Portland, OR
    Posts
    61
    Rep Power
    7

    Question Spam / Deferred queue

    I keep getting hundreds of emails backed up in my Deferred queue. I do not have an open relay but scanning the headers of the emails, it sure looks like I do. They purport to be 'from' me and are usually phishing scams of some sort, and I've tracked them back to all sorts of other countries and obviously compromised machines. What I'm trying to determine is if they're simply forging headers and claiming to be from me, or if they really are somehow. If I don't have an open relay, is it possible they're still actually coming from my server?

  2. #2
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,505
    Rep Power
    57

    Default

    They are likely to be what is known as 'backscatter' or 'NDR' spam, search the forums for 'backscatter' and you'll find a couple of threads that have info on stopping it.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    ryandball's Avatar
    ryandball is offline Senior Member
    Join Date
    Dec 2007
    Location
    Portland, OR
    Posts
    61
    Rep Power
    7

    Default

    That is what I was thinking too. I will keep browsing.

  4. #4
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,505
    Rep Power
    57

    Default

    I think this should be the thread you want: http://www.zimbra.com/forums/adminis...ckscatter.html
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  5. #5
    jrefl5 is offline Advanced Member
    Join Date
    Nov 2007
    Location
    AZ, USA
    Posts
    205
    Rep Power
    7

    Default

    Randall
    check that salocal has a "whitelist_bounce_relays" line in it which should list the only server(s) that you will accept bounces for (the server you are running on) otherwise the bounce filters are not activated in SA.

    I think its one of the items in Phoenix's link.
    Last edited by jrefl5; 08-06-2008 at 01:22 PM. Reason: typo

  6. #6
    ryandball's Avatar
    ryandball is offline Senior Member
    Join Date
    Dec 2007
    Location
    Portland, OR
    Posts
    61
    Rep Power
    7

    Default Thank you

    I've applied those changes, waiting to see if it helps or not...

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Delete spam mails from queue
    By sandiphw in forum Administrators
    Replies: 15
    Last Post: 11-01-2012, 10:07 AM
  2. [SOLVED] Mailserver down when send file attach of 50Mb
    By ZMilton in forum Administrators
    Replies: 20
    Last Post: 04-10-2008, 11:44 AM
  3. Queue Problem - Deferred Inbound Issues
    By tbridge in forum Administrators
    Replies: 0
    Last Post: 12-10-2007, 04:16 PM
  4. Lots of deferred errors all of a sudden
    By CdtDelta in forum Administrators
    Replies: 0
    Last Post: 12-01-2007, 08:27 AM
  5. Replies: 3
    Last Post: 07-19-2007, 02:00 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •