Logout

Alt-N Discussion Groups > Discussions > find outgoing smap

[F] Alt-N Discussion Groups / Discussions /

find outgoing smap

[Caruth, Arron]
Arron Caruth
Arron Caruth - 07:27am, Jun 22 2020
Guest User

The easiest way to see which accounts are sending the most messages is to look at the reports in MDaemon Remote Administration.  To do that, login to MDRA and go to Reports / Outbound Email / Top Senders.

 

 

--
Arron Caruth
Vice President of Product Development
o: 817-601-3222    e: Arron.Caruth@mdaemon.com

MDaemon Technologies
Simple Secure Email
Visit us on www.mdaemon.com | Facebook | LinkedIn | YouTube
Sent using the MDaemon Email Server

From: discuss@mdaemon.com [mailto:discuss@mdaemon.com] On Behalf Of lists-discuss@mdaemon.com (Andrius Karpas)
Sent: Friday, June 19, 2020 11:55 AM
To: discuss List Member <discuss@mdaemon.com>
Subject: [discuss] find outgoing smap

 

Hello,
Our mail IP was twice listed on Spamhouse in XBL list on CBL lookup.
The description says it could be Mikrotik router fault but our router is safe and secured no faults or problems. Have created a firewall rule to see if any of the devices sending anything outside on port 25, results are only mail server does this. So I think one of the mail accounts is sending spam. How would a be able to identify spammy account on MDaemon? Scanned all network devices for malware and so on all good. Any advice much appreciated in advance!

View/reply at find outgoing smap

 
 
--DISCUSS--------------------------------------------------------------
This mailing list is for questions and discussion regarding Alt-N
products.  To unsubscribe from this mailing list send an email to
discuss-unsubscribe@mdaemon.com .
--DISCUSS--------------------------------------------------------------
 
 
-----------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user 
support and discussion.  MDaemon staff members may participate in the 
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical 
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
-----------------------------------------------------------------------

--DISCUSS--------------------------------------------------------------
This mailing list is for questions and discussion regarding Alt-N
products.  To unsubscribe from this mailing list send an email to
discuss-unsubscribe@mdaemon.com .
--DISCUSS--------------------------------------------------------------


-----------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion.  MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
-----------------------------------------------------------------------

  All MessagesOldest ItemsOlder ItemsNewer ItemsNewest Items

Andrius Karpas - Jun 24, 2020 2:53 pm (#1 Total: 2)  

 

Photo of Author
Andrius Karpas
Newbie
Newbie
Posts: 20
Thanks, Arron, I have seen these reports but still can get who is spamming, I have firewall forwarding rules allowing port 25 only for mail, server any other device trying to do SMTP on port 25 gets blocked. If monitor the connection to the mail server and out on the firewall I can see doggy IP's those doing a constant connection to the mail server and those IP are blacklisted as well in various places. I'm nearly one hundred per cent sure that all the problem is in mail server but can't identify, virus scan sais it free of virus.
Would you be able to advise anything that else I could try?

Arron Caruth - Jun 24, 2020 3:10 pm (#2 Total: 2)  

Guest User  

Photo of Author
Posts: 1

Does the CBL offer any information about the emails that are causing you to get blocked?

 

Reading through the information for the CBL they say they do not block servers because they are an open relay, but I would recommend testing your server using a tool such as www.mxtoolbox.com.

 

If the mail is being sent out through the mail server, I would also suggest making sure that the server is setup to require authentication when sending messages even for connections from local IP addresses.  This might prevent unwanted mail from being sent through your server. 

 

Ultimately we need to find a message that is causing you to get blocked so that we can see how it is being sent.  It could be a compromised account that is being used to send email, there really isn’t any way of knowing without finding the message, or at least the message being processed in the logs.  All we can do without that information is try to make your server as secure as possible.

 

Here are some recommended security settings:

 

https://www.altn.com/Support/KnowledgeBase/KnowledgeBaseResults/?Number=1144

 

You should also make sure users are using secure passwords.

 

--
Arron Caruth
Vice President of Product Development
o: 817-601-3222    e: Arron.Caruth@mdaemon.com

MDaemon Technologies
Simple Secure Email
Visit us on www.mdaemon.com | Facebook | LinkedIn | YouTube
Sent using the MDaemon Email Server

From: discuss@mdaemon.com [mailto:discuss@mdaemon.com] On Behalf Of lists-discuss@mdaemon.com (Andrius Karpas)
Sent: Wednesday, June 24, 2020 2:54 PM
To: discuss List Member <discuss@mdaemon.com>
Subject: [discuss] find outgoing smap

 

Thanks, Arron, I have seen these reports but still can get who is spamming, I have firewall forwarding rules allowing port 25 only for mail, server any other device trying to do SMTP on port 25 gets blocked. If monitor the connection to the mail server and out on the firewall I can see doggy IP's those doing a constant connection to the mail server and those IP are blacklisted as well in various places. I'm nearly one hundred per cent sure that all the problem is in mail server but can't identify, virus scan sais it free of virus.
Would you be able to advise anything that else I could try?

View/reply at find outgoing smap

 
 
--DISCUSS--------------------------------------------------------------
This mailing list is for questions and discussion regarding Alt-N
products.  To unsubscribe from this mailing list send an email to
discuss-unsubscribe@mdaemon.com .
--DISCUSS--------------------------------------------------------------
 
 
-----------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user 
support and discussion.  MDaemon staff members may participate in the 
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical 
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
-----------------------------------------------------------------------



  All MessagesOldest ItemsOlder ItemsNewer ItemsNewest Items


 Content:

Read New | Search

 Guest:

Email to Admin

You are visiting as a Guest user.