Results 1 to 2 of 2

Thread: Mail server black listed in CBL

  1. #1
    cnvivek is offline Intermediate Member
    Join Date
    May 2013
    Posts
    19
    Rep Power
    1

    Default Mail server black listed in CBL

    Hi

    I am learner in Zimbra. We have a Zimbra mail server (version zcs-8.0.2) placed behind the firewall, Today our mail server got blacklisted in CBL on further checking with I found we are blacklisted in nixspam it gave another one url http://zy0.de/q/x.x.x.x it gave a sample spam mail header. As precautionary measure we had check all PC's in our network for virus and malware source using tools but found nothing. I am pasting below the header can any one help me what really happened and give me a fix.

    Note:
    I had replaced my server name with mail.mydomain.com and IP with x.x.x.x

    I had configured zen.spamhaus.org and b.barracudacentral.org to MTA RBL client

    Return-Path: <fraud@aexp.com>
    X-Original-To: hexageplant@SPAMTRAP.INVALID
    Received: from mail.mydomain.com (mail.mydomain.com [x.x.x.x])
    by mx.selfip.biz (Spamtrap) with ESMTP
    for hexageplant@SPAMTRAP.INVALID; Tue, 19 Nov 2013 00:18:06 +0100 (CET)
    Received: from [154.153.232.254] (port=38632 helo=[10.0.4.99]) by x.x.x.x with asmtp id 1rqLaL-00026-00 for hexageplant@SPAMTRAP.INVALID; Tue, 19 Nov 2013 04:48:04 +0530
    Message-ID: <528A9EFD.8040308@auspost.com.au>
    Date: Tue, 19 Nov 2013 04:48:04 +0530
    From: "Australia Post" <noreply@auspost.com.au>
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0.1) Gecko/20110929 Thunderbird/7.0.1
    MIME-Version: 1.0
    To: hexageplant@SPAMTRAP.INVALID
    Subject: Track Advice Notification: Consignment RYR7034588
    Content-Type: multipart/mixed;
    boundary="----=_Part_78692_3751323175.2754432630909"
    X-Spam: Not detected
    X-Mras: Ok


    Regards
    Vivek
    Last edited by cnvivek; 11-19-2013 at 08:10 AM. Reason: to add more information

  2. #2
    umarzuki is offline Loyal Member
    Join Date
    Oct 2009
    Location
    Malaysia
    Posts
    78
    Rep Power
    5

    Default

    you have to check on mailq & zimbra stats which user that are spamming.

    once you have found which one, check that user's preferences for "reply to" setting (tempered reply to setting is usually a sign of compromised web mail account)

    enforce complex password.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. All mail sub-directories listed in IMAP client by default
    By batfastad in forum Administrators
    Replies: 0
    Last Post: 08-29-2013, 03:01 PM
  2. My mail server is listed in black list, I need know how solve.
    By mvalenzuela.cl in forum Administrators
    Replies: 4
    Last Post: 07-17-2013, 11:29 AM
  3. Replies: 1
    Last Post: 09-19-2008, 06:38 AM
  4. one user's incoming mail goes into black hole
    By Lebha in forum Administrators
    Replies: 8
    Last Post: 02-18-2008, 04:01 AM
  5. URGENT: Our server got listed on spamhaus.org
    By moniker in forum Administrators
    Replies: 3
    Last Post: 11-01-2006, 08:03 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •