Results 1 to 5 of 5

Thread: My mail server is listed in black list, I need know how solve.

  1. #1
    mvalenzuela.cl is offline Senior Member
    Join Date
    Sep 2007
    Location
    Santiago - Chile
    Posts
    73
    Rep Power
    7

    Default My mail server is listed in black list, I need know how solve.

    Hi, I have problem, my server is listed in spamhaus. I need solve this, but my problem is that I don't know how. I need know that log files see to discover who is o from that IP are the attack.
    Now I blocked all access to smtp port(25) from any IP incluided LAN, only access permit from webmail zimbra.
    What files logs I need see, and any example?, please

    Can you help me!

    Sorry, but my english is not good.

  2. #2
    chauvetp is offline Elite Member
    Join Date
    Apr 2008
    Location
    New Paltz, NY
    Posts
    335
    Rep Power
    7

    Default

    You will want to look at:

    /var/log/maillog
    /opt/zimbra/log/audit.log
    ---
    Paul Chauvet
    State University of New York at New Paltz

  3. #3
    jgutierrezg is offline Banned
    Join Date
    Nov 2012
    Posts
    4
    Rep Power
    0

    Default

    Hi mvalenzuela.cl,

    I suggest you to see the mail queue from CLI executing: "/opt/zimbra/postfix/sbin/postqueue -p" (without quotes), if you see a large count of mails in queue you have to catch the account who send spam and search this account in /var/log/maillog or /var/log/zimbra.log, now find the source ip where the spammer is sending mail.

    If your server is clean and it is in the same network of the pc's that means one of your pc's is infected with virus spammer.

    Regards.

  4. #4
    anudeep@itopstube.com's Avatar
    anudeep@itopstube.com is offline Active Member
    Join Date
    Dec 2012
    Location
    Hyderabad
    Posts
    30
    Rep Power
    2

    Default

    Go to your admin control panel and under server settings check Enable authentication option is checked or not.. if not check that one first (why because it will cat as anonymous SMTP) . check your mail activity my observing Daily mail report (which will generate daily at admin@ account mailbox)

    If every thing looks good you may apply for unblock..

    URL: Blocklist Removal Center - The Spamhaus Project
    Thanks,
    Anudeep.
    From itopstube.com

  5. #5
    Yves Pires is offline Senior Member
    Join Date
    Jun 2011
    Posts
    52
    Rep Power
    4

    Default

    First you need to block spammer, then remove your IP from blacklists

    cat /var/log/mail.log | grep "sasl_method=PLAIN" | cut -d: -f5 | sort | uniq -c | sort -n

    40 client=unknown[200.103.xxx.xx], sasl_method=PLAIN, sasl_username=spammer
    12262 client=200-103-.ctame706.dsl.brasiltelecom.net.br[200.103.xxx.xxx], sasl_method=PLAIN, sasl_username=spammer
    12669 client=200-103-ctame706.dsl.brasiltelecom.net.br[200.103.xxx.xxx], sasl_method=PLAIN, sasl_username=spammer
    20384 client=200-103-ctame706.dsl.brasiltelecom.net.br[200.103.xxx.xxx], sasl_method=PLAIN, sasl_username=spammer
    28182 client=200-103-ctame706.dsl.brasiltelecom.net.br[200.103.xxx.xxx], sasl_method=PLAIN, sasl_username=spammer
    52460 client=200-103-ctame706.dsl.brasiltelecom.net.br[200.103.xxx.xxx], sasl_method=PLAIN, sasl_username=spammer


    to block acc: zmprov ma user@domain.com zimbraAccountStatus closed

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Distribution list not listed in GAL
    By LinU777 in forum Users
    Replies: 1
    Last Post: 07-13-2012, 04:12 AM
  2. White and Black list zimbra 7.1.3
    By jocey_ricardo in forum Administrators
    Replies: 3
    Last Post: 04-16-2012, 11:50 AM
  3. Enhanced black-list protection
    By mickier in forum Administrators
    Replies: 1
    Last Post: 01-31-2011, 10:28 AM
  4. [SOLVED] ZCS6 RC1 NE - Black/White List
    By uxbod in forum Administrators
    Replies: 3
    Last Post: 08-01-2009, 12:00 AM
  5. white list / black list feature?
    By partypooper in forum Administrators
    Replies: 1
    Last Post: 06-16-2006, 05:56 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •