Topic: too many outgoing mails

[davidS]

hello
i need help please i am running sme server 9 and from the morning i'm receiving an alert mails that there are a lot of outgoing mails from my server and i dont know from where ?

Tue Oct 20 17:55:08 2015
During the last 5 minutes, 223 outgoing e-mails were detected, you had set the alert limit to 5 outgoing e-mails.
(Possible reasons : do you send spam ? administrate a mailing-list ?)
If you have access to the server-manager, use this link to modify the limit :

all day long .

[Stefano]

hi..

first of all: are you running any kind of web app (joomla, wordpress and so on?)
then.. is your SME a gateway for any client?

in any case, the first thing to do ASAP is to disconnect your server from WAN, then investigate

[davidS]

hi and thank you
i am running a few joomla and prestashop sites
my server is on server only mode but how can i know from which site the mails are from.

[Stefano]

first of all, TAKE IT OFFLINE!

then, time to dig into mail's logs..

are your joomla and prestashop uptodate? are their plugins the same?

[davidS]

i think it stopped for now, i went to the qmail log file i saw that all the mail are from one domain name .
so i disabled his phpmailer and added an smtp account .
is it ok ????

[Stefano]

we can't know, since we can't see what's in front of your eyes nor we know anything about your setup

you must investigate it

[davidS]

hi stefano
so after i removed teh domain form my server im geting alot of

MAILER-DAEMON failure notice‏
Hi. This is the qmail-send program at ori-comp.com.
I tried to deliver a bounce message to this address, but the bounce bounced!

from where those mails coming from ??

[Daniel B.]

hi stefano
so after i removed teh domain form my server im geting alot of from where those mails coming from ??

We have absolutly no way to tell you this, only your logs (httpd/access_log, qpsmtpd, qmail) contains the relevent information

[janet]

hi stefano
so after i removed teh domain form my server im geting alot of from where those mails coming from ??

The answer is as stated

This is the qmail-send program at ori-comp.com.

[holck]

MAILER-DAEMON failure notice‏
Hi. This is the qmail-send program at ori-comp.com.
I tried to deliver a bounce message to this address, but the bounce bounced!

What leads to messages like this is probably something like:

• Your server tries to deliver an email to a user@ori-comp.com
• Because of your many emails or their content, the server at ori-comp.com will not accept the email from your server
• The ori-comp.com server tries to inform your server of the problem by delivering a bounce message
• because you closed the domin, your server will not accept the bounce message, so the bounce bounces