Koozali.org: home of the SME Server

Obsolete Releases => SME Server 9.x => Topic started by: davidS on October 20, 2015, 06:28:23 PM

Title: too many outgoing mails
Post by: davidS on October 20, 2015, 06:28:23 PM
hello
i need help please i am running sme server 9 and from the morning i'm receiving an alert mails that there are a lot of outgoing mails from my server and i dont know from where ?
Quote
Tue Oct 20 17:55:08 2015
During the last 5 minutes, 223 outgoing e-mails were detected, you had set the alert limit to 5 outgoing e-mails.
(Possible reasons : do you send spam ? administrate a mailing-list ?)
If you have access to the server-manager, use this link to modify the limit :
all day long .

Title: Re: too many outgoing mails
Post by: Stefano on October 20, 2015, 06:37:07 PM
hi..

first of all: are you running any kind of web app (joomla, wordpress and so on?)
then.. is your SME a gateway for any client?

in any case, the first thing to do ASAP is to disconnect your server from WAN, then investigate
Title: Re: too many outgoing mails
Post by: davidS on October 20, 2015, 06:43:22 PM
hi and thank you
i am running a few joomla and prestashop sites
my server is on server only mode but how can i know from which site the mails are from.
Title: Re: too many outgoing mails
Post by: Stefano on October 20, 2015, 06:47:17 PM
first of all, TAKE IT OFFLINE!

then, time to dig into mail's logs..

are your joomla and prestashop uptodate? are their plugins the same?
Title: Re: too many outgoing mails
Post by: davidS on October 20, 2015, 06:53:14 PM
i think it stopped for now, i went to the qmail log file i saw that all the mail are from one domain name .
so i disabled his phpmailer and added an smtp account .
is it ok ????
Title: Re: too many outgoing mails
Post by: Stefano on October 20, 2015, 07:02:35 PM
we can't know, since we can't see what's in front of your eyes nor we know anything about your setup

you must investigate it
Title: Re: too many outgoing mails
Post by: davidS on October 21, 2015, 06:01:07 PM
hi stefano
so after i removed teh domain form my server im geting alot of
Quote
MAILER-DAEMON failure notice‏
Hi. This is the qmail-send program at ori-comp.com.
I tried to deliver a bounce message to this address, but the bounce bounced!
from where those mails coming from ??
Title: Re: too many outgoing mails
Post by: Daniel B. on October 21, 2015, 06:28:44 PM
Quote from: davidS on October 21, 2015, 06:01:07 PM
hi stefano
so after i removed teh domain form my server im geting alot of from where those mails coming from ??

We have absolutly no way to tell you this, only your logs (httpd/access_log, qpsmtpd, qmail) contains the relevent information
Title: Re: too many outgoing mails
Post by: janet on October 21, 2015, 10:13:41 PM
Quote from: davidS on October 21, 2015, 06:01:07 PM
hi stefano
so after i removed teh domain form my server im geting alot of from where those mails coming from ??
The answer is as stated

This is the qmail-send program at ori-comp.com.
Title: Re: too many outgoing mails
Post by: holck on October 21, 2015, 11:00:03 PM
Quote
MAILER-DAEMON failure notice‏
Hi. This is the qmail-send program at ori-comp.com.
I tried to deliver a bounce message to this address, but the bounce bounced!

What leads to messages like this is probably something like: