Zimbra getting too much spam mails

[vishal.fichadiya]

Hi guys,
I am new to Zimbra. I have just installed Zimbra on my CentOs machine.
I just started server and after 2-3 days i find that there are too much request to send mails from zimbra by some spam mail id's which i had seen by seeing
zimbra.log file under /var/log directory.
this is its examples:


postfix/error[28167]: A74C12953C3: to=<cdfbdq@yahoo.com.cn>, relay=none, delay=4146, delays=4144/0.02/0/1.8,
=deferred (delivery temporarily suspended: host mx1.mail.cnb.yahoo.com[203.209.228.250] refused to talk to me: 421 4.7.0 S01] Mess
.104.14 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html)

Feb 23 23:10:32 mydomainpostfix/qmgr[27696]: 2F5882CEF7B: from=<fumnu@mydomain.com>, size=11533, nrcpt=1 (queue active)
Feb 23 23:10:32 mydomain postfix/smtpd[27702]: 31B602CF3DE: client=localhost.localdomain[127.0.0.1]
Feb 23 23:10:32 mydomain postfix/cleanup[27728]: 31B602CF3DE: message-id=<201102241442310623427@tumbhi.com>
Feb 23 23:10:32 mydomain postfix/qmgr[27696]: 32E0628B4B7: from=<>, size=23106, nrcpt=1 (queue active)
Feb 23 23:10:32 mydomain postfix/qmgr[27696]: D82A31C8970: from=<>, size=16990, nrcpt=1 (queue active)


I got these kind of unknown addresses logs to my Zimbra mail server. So its affecting my mail servers performance and it takes more time to send mail which i had configured from my java application.How to restrict these mail senders to my Zimbra mail server or rather blocking these mail domains so that they wont able to send mail through Zimbra.

[phoenix]

Why did you post this in the Developers forum when it's nothing to do with Zimbra Development? I'll move it to the correct forum.

Originally Posted by vishal.fichadiya

Hi guys,
I am new to Zimbra. I have just installed Zimbra on my CentOs machine.
I just started server and after 2-3 days i find that there are too much request to send mails from zimbra by some spam mail id's which i had seen by seeing
zimbra.log file under /var/log directory.
this is its examples:


postfix/error[28167]: A74C12953C3: to=<cdfbdq@yahoo.com.cn>, relay=none, delay=4146, delays=4144/0.02/0/1.8,
=deferred (delivery temporarily suspended: host mx1.mail.cnb.yahoo.com[203.209.228.250] refused to talk to me: 421 4.7.0 S01] Mess
.104.14 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html)

Feb 23 23:10:32 mydomainpostfix/qmgr[27696]: 2F5882CEF7B: from=<fumnu@mydomain.com>, size=11533, nrcpt=1 (queue active)
Feb 23 23:10:32 mydomain postfix/smtpd[27702]: 31B602CF3DE: client=localhost.localdomain[127.0.0.1]
Feb 23 23:10:32 mydomain postfix/cleanup[27728]: 31B602CF3DE: message-id=<201102241442310623427@tumbhi.com>
Feb 23 23:10:32 mydomain postfix/qmgr[27696]: 32E0628B4B7: from=<>, size=23106, nrcpt=1 (queue active)
Feb 23 23:10:32 mydomain postfix/qmgr[27696]: D82A31C8970: from=<>, size=16990, nrcpt=1 (queue active)

I got these kind of unknown addresses logs to my Zimbra mail server. So its affecting my mail servers performance and it takes more time to send mail which i had configured from my java application.How to restrict these mail senders to my Zimbra mail server or rather blocking these mail domains so that they wont able to send mail through Zimbra.

Zimbra, by default, does not act as an open relay unless you have modified the system to allow it to be one. You may also have a compromised account, search the forums for details and you can also look at the wiki article(s) on improving the anti-spam system. It would also be a good idea if you gave some follow-up to your last thread in the forums.