HELP -- mail account created and spamming

Hello
I was informed my mail service is spamming
I figured out it is coming from an account that I did not create.
I rebuild the imap and it recrates the account.
Is there a way to delete the acocunts so the SMTP server does not keep sending spam
??

You haven't posted up enough of the log to determine what is going on, possibly which account is sending the email. Post up the entire transaction from the point an account logs in to send the message to the point when the client disconnects from the server. Make sure your 'SMTP log detail level:' is set to 'Information' so you get enough detail about complete mail transaction.
Look for an entry that looks similar to this (the authentication method may be different) just before what you posted.
Jul 28 17:13:06 mailserver postfix/smtpd[26831]: 32AB51B470F: client=cpe000f3d3b19d5-cm0011ae908964.domain.com[123.456.789.159], sasl_method=CRAM-MD5, sasl_username=johndoe
Jul 28 17:13:06 server postfix/cleanup[26814]: 32AB51B470F: message-id=<[email protected]>
Jul 28 17:13:06 server postfix/qmgr[5443]: 32AB51B470F: from=<[email protected]>, size=12139, nrcpt=2 (queue active)
All the way to
Jul 28 17:13:34 server postfix/qmgr[5443]: 1BF831B4733: removed
Jul 28 17:13:53 server postfix/smtpd[26813]: disconnect from unknown[251.654.987.753]
Jul 28 17:14:06 server postfix/smtpd[26831]: disconnect from cpe000f3d3b19d5-cm0011ae908964.domain.com[123.456.789.159]
This way we might be able to determine if and which account was compromised or which IP address the attacker is connecting from. The return address is obviously forged, that's why it's bouncing back to that non-existant account.
If an account wasn't compromised, the log will show that as well, then Jeff is correct, the server itself may have been compromised with a script or web site vulnerability.
Also, if I try and access 'http://marinergraphics.com/info.php' I get an error and a reference to 'Powered By Biosonik Formmail V1' which has a dead link to 'http://design.biosonik.com/'. What's that about. Biosonik Formmail is a script for an email form. Are you sure it hasn't been compromised?

Similar Messages

I had a MobileMe account and when Apple switched to iCloud I now have two mail accounts: @mac and @me. Additionally my folders in iCloud not longer show up in my Mail program. How do I return to one account and see my folders on my mac?

I had a MobileMe account and when Apple switched to iCloud I now have two mail accounts: @mac and @me. Additionally my folders in iCloud no longer show up in my Mail program on my iMac. How do I return to one account and see my iCloud folders on my mac?

I went to Notes. Showed all notes. Three notes are duplicated, one on iCloud and one on Icloud. I deleted one of the notes and checked to see if the other still existed. It did. I deleted the other two notes. I check all notes and found that the three notes were deleted on both accounts. The only notes on this device are under On My iPad.
I went into system settings and tried to delete the Icloud account. The warning comes up: This will delete all IMAP notes on your device. Will this also delete the notes in On My iPad?

HT1688 I am having issues get my email in one of my mail accounts so I tried to "DELETE" the whole account. But my phone will not delete a mail account. And the phone is getting really hot and battery was full 2 hours ago and now at 25%.

I am having issues get my email in one of my mail accounts so I tried to "DELETE" the whole account. But my phone will not delete a mail account. And the phone is getting really hot and battery was full 2 hours ago and now at 25%.

Well, you don't say what happens when you try to delete the account. So I don't know what else to recommend. However, if your phone is not charging, is that the mains charger or the computer USB? Also, if it not showing any change to battery percentage, then something is wrong with the software. The next step in user troubleshooting after the reset is a restore from backup. However, considering the condition of the phone right now, I would be more than willing to say your backup is going to be corrupt. But you can try. If that does not fix the device, then you restore as new, not from a backup. If the phone works, then you can try restoring the backup again, but if it messes up, you are going to have to restore as new again. If the restore as new does not work, then you need to make an appointment at the Genius Bar or Authorized Apple Service Provider to get the hardware checked.

Cannot get mail using iCloud. Says no password provided for iCloud, to go to Mail Account Settings and enter a password, even though I've already done this. Very odd.

Cannot get mail using iCloud. Says no password provided for iCloud, to go to Mail Account Settings and enter a password, even though I've already done this. Very odd. Am I doing something wrong?

I doubt you are doing anything wrong. First day glitches
Reset the device.
Hold the On/Off Sleep/Wake button and the Home button down at the same time for at least ten seconds, until the Apple logo appears.
Make sure you have Mail selected here > http://www.apple.com/icloud/setup/

Need help : mail account settings crashes !

I've been looking around the forums for a while but can't seem to find a topic covering this.
Can anyone plz help me with the following problem :
I've got several mail accounts set-up on my iphone.
Yesterday i added another account (5th account), specific a Gmail account.
(at least i think this is when the problem started).
After this, i noticed my other (regular popmail and hotmail) accounts didn't seem to be working.
so i thought let me check out the settings...
to my suprise i cannot seem to edit or delete these accounts !!
everytime i want to go to settings, the phone crashes into home screen
i've been trying to resolve this al nght now, even tried factory reset with backup twice (i need to keep my backup... ) but the mail settings still crash to home.
I'm really desperate by now ...
all i can find online is some resolutions on how to do it with a jailbroken phone..
can anyone help ?
grt.
ron.

sorry i seem to have put this topic in the wrong forum
(enterprise io regular iphone )
can someone move it ?

Hacking of e-mail account (yahoo and gmail) while both are configured to my iPhone?

Yesterday the 8th of October, 2012 at about 2.45 pm IST (Indian Standard Time) both my e-mail accounts which are configured to the iPhone were hacked. The hacker not only sent some ridiculous mail from the account asking my contacts to send money through Western Union Money Transfer, but deleted my last 3 months sent mails, inbox and the entire contacts.
They also added a new mail to my alternative mails. Upon approaching the cyber crime department it was given to understand that these criminals had used a IP address from Nigeria, Africa.

Shiv1611 wrote:
Though i am still gona try using the same Itunes. Will same Itunes support two apple ids.
That depends on what you mean. If you mean two iTunes Store accounts, no. Only one Apple ID can be logged into the iTunes Store at a time and if automatic download, iTunes Match or re-downloading of content is used the ID can not be changed for 90 days.
Shiv1611 wrote:
So i guess if i solve my goof up on creating different apple IDs and setting her phone as a new one .. according to you that shall do the trick.
But i have a question here in that case what happens to all the applications that have been purchased on my Id ? Wont i be needing them to be purchased/downloaded again in the new id?
If you previously had been using the same Apple ID for iTunes Store purchases for both of you there is no reason to change what you've been doing. If this is your wife's first iPhone, and you want to share the iTunes Store account just don't use the new Apple ID you created. As long as there are no purchases on it there's nothing to worry about.

Mail account created automatically cannot be deleted

In our office we are testing a server running Snow Leopard Server that has some test user accounts on it. When I connected my laptop this morning to the network a message mentioned that the server was there and asked me if I wanted to configure mail, ical etc to use the server. I did and connected it to my test user account on the server.
It created a new mail account in Mail on my laptop for that servers user. which is what I wanted.
In Mail I tried to delete this mail account and rather than deleting it just becomes greyed out and is not removable from Mail.
How do I remove this account?

I had the same problem yesterday.
I eventually discovered that you have to remove the Network Account Server in your account details.
So:
Systems Preferences
Login Options
Edit on Network Account Server
Click on the Account and then the - button
Confirm and then Done.
Now you should be able to delete the mail account.
Richard

Help Required on Creating and Maintaining an Apple Network Without a Server

Hi,
I'm an external IT technician for a new educational block at a hospital who intend on using apple mac computers alongside windows computers running off of a windows server..
I usually deal with windows XP as an operating system so OSX is relatively new to me..
Basically what I have is a suite of 6 iMacs which are all sharing files from the windows server via a network share drive I set up. I've just got off the phone with the project manager and she wishes to have individual logons for each member of staff and student here, this adds up to around 25 people..
I have allready created a generic "teacher" and "student" logon which has all of the right things in the dock + settings etc that I need. Is there an easy way to duplicate those settings to create new profiles?
I'm just trying to look for ways of making this easier for myself and for the school in the future.. I have a feeling that the ideal solution would be to have an apple server installed and manage the users from there but I don't think that it was considered at the time of purchase..
So can anyone help me out? I'll be grateful for any tips or advice on creating and maintaining this system as I'm due to support this place for the next year.
Thanks alot,
Martin

Bump.

Search Help for Account ID and Employee

Hi,
I have a requirement like this:
I have a custom field: Escalation To. For this, I need to provide F4 help which shows Employees and Account ID (ex: Sold to Party/Bill to etc).
So, I used the component - BP_HEAD_SEARCH. However the problem is : In this, I have chosen the filed role - as Employee and clicked on search. But it is not showing all the employees.
And when I used the component - BP_EMPL_SEARCH, it is showing all the employees. I don't know, what is wrong with this.
Could you please help me out for this? How can I provide F4 help which works for both Employees and all other BP's
Thanks,
Sandeep

Hello Glenn,
Thanks for the reply.
Let me rephrase my question.
Account ID is already there as a search field. But I want to add F4 search help for this field.
So when the user hits F4 key, the system should display the 'BUPA' search help so that user can search for the BP number by name, zip code etc.
So I want to attach the search help 'BUPA' to the 'Account ID' field in the screen.
Can you please let me know how to do that?

A copy has been placed in your outbox. No password provided. Please go to Mail Account Settings and enter a password.

This is the message I get on my iPhone 4s when I attempt to send mail. I have reentered my password and POP info, but without results. Anyone encountered/solved this problem before?

Which mail provider are you using?
I'd delete the mail account, reset your network settings, and then add the email account again after your phone restarts.

Mail 2.1 and Spam

After three years of no spam getting past my Mail junk filter-now spam is getting past it. Any answers? Will I have to reset and "retrain" my Mail app.? Any answers? I depend on my .mac e-mail address. Is this due to the last security upgrade? Thank You. -Joe
Powerbook G4 12" 1.5Gz Mac OS X (10.4.8) 768 MB RAM, iPod mini, Palm Tungsten, Soundsticks

But I'm not trying to tell Mail that a non-junk message
is from someone I want to receive messages from. I'm just
trying to tell it that type of message isn't junk -- IOW,
that messages with similar characteristics are acceptable.
Maybe that’s not the reason you mark a message as not junk, but users in general may mark a message as not junk for a variety of reasons, and Mail must be able to handle all the possibilities without cluttering the user interface.
If the user marks a message from a particular sender as not junk, it’s safe to assume that the user doesn’t want any other messages from that sender to be treated as junk, regardless of its contents, which is exactly what adding the sender address to the Previous Recipients list accomplishes.
It seems a perfectly valid design decision to me. As with almost all design decisions in software development, there are trade-offs associated with it, but the only downside I see here is that it’s undocumented and that the user may mark a message as not junk by mistake.
That's the point of a trainable filter. It is supposed to learn
characteristics that apply across a range of messages that I
personally consider non-junk
But adding the sender to the Previous Recipients list allows the number of false positives to be reduced without increasing the number of false negatives. If the filter had to handle this using the training mechanism only, then either the number of false positives or the number of false negatives (or both) would probably end up being unacceptable...
“Previous Recipients” is clearly an independent criterion for
determining what I personally do not consider junk that an
analytic filter might
Yes, and that’s precisely why the junk filter uses both to determine whether a message should be treated as junk or not...
If Apple wants to add a “Valid Email Addresses” list
or something similar to augment the Address Book,
that's fine by me, but mixing it with the “Previous
Recipients” list is lame whether its intentional or not,
since it assumes something that is not necessarily
true, not intuitive, & may even be counterproductive.
Well, if you can come up with a better design that has all the advantages of the current one without some of its drawbacks, I’m pretty sure Apple would love to know about it. I’m not saying that it cannot be done (I haven’t really thought enough about it myself), just that if you pretend that Mail should stop adding the sender to the Previous Recipients list when marking a message as not junk, and leave the rest of the design as it’s now, then I don’t expect your suggestion to be implemented anytime soon.

Mac Mail turned all my Yahoo mail accounts inactive and I can't restore them. Please help!

I was using mac mail this morning with my 2 yahoo email accounts. Out of nowhere the accounts went inactive. When I went to the mail settings and tried to restore the email by clicking the mail check box nothing happen. I can still send and receive mail on my phone but the mac mail program is another story. Any help is greatly appreciated.

Mail/Mailbox/Take All Accounts On-Line.
Mail troubleshooting - Yosemite
Mail (Yosemite): If you can’t receive messages
What does Mail/Window/Connection Doctor Show? If the server is red, select it and look at the Show Details box.
Troubleshooting sending and receiving email messages
Troubleshooting sending email messages
SMTP servers keep going offline

Forwarded mail account delay and unauthorized mail in outgoing queue

Two issues I'm having and can't pin down:
1. One of the accounts I have has his mail forwarded to another account, recently there has been quite a delay in him receiving his mail, is there anything in the server set-up that could be delaying the sending of his messages out?
2. I am finding a lot of messages that are not from accounts on the server (obvious spam accounts) and are not being sent to accounts on the server. How can I have the server only accept requests to send mail from authorized users.
Thanks in advance for any help on these issues.

Regarding first issue of delays, you can get more info in a couple of ways....
1. Get your client to expand a 'late' received message to show full headers and then forward this to you. You will be able to see from the headers where the delay is happening since every receipt along the line is time stamped.
2. Search your server's mail.log for your client's incoming/outgoing mail. You will be able to fully track the progress through your server, culminating in the final sending to their account box (or relay out if being forwarded). See below for info on tracing messages through mail.log.
Regarding second issue, your mynetworks contains the subnet 216.153.138.0/24. This subnet contains all 254 public IPs from 216.153.138.1-254. I doubt if that is what you want since any public IP in that range can relay through your server freely. Maybe it is just the one IP you want? If so, just specify the IP and drop the "/24".
Apart from that, the only way someone can relay out to a domain outwith your 'mydestination' list is to authenticate as legitimate user first. If the outgoing 'spam' is not coming from one of the opened public IPs then you may well have a cracked username/password. There are other possibilities too, like a spamming local computer or hacked server, so more info would be required to diagnose. If you scan through the mail.log, are there a LOT of messages getting sent out all during the same one period? (like several per minute for twenty minutes or longer).
EDIT: Also, take at look at Pterobyte's 'Frontline Spam Defense' doc at http://osx.topicdesk.com/content/category/4/18/62/
Excellent guide on how to tighten up your anti-spam.
david
TRACING MESSAGES PROGRESS THROUGH MAIL.LOG
When a connection is first made you will get the following log message...
Aug 26 15:38:32 blue postfix/smtpd\[13201\]: connect from mail.hostname\[194.97.214.186\]
After the 'rcpt to' command is given by the sending server (which is done prior to sending actual mail message) then you will see this log message...
Aug 26 15:39:10 blue postfix/smtpd\[13201\]: 40329F9A2D: client=mail.hostname\[194.97.214.186\]
Note that the same smtpd process number (13201) is used for both these messages.
After end of 'data' command, i.e., message completed, then you get...
Aug 26 15:39:33 blue postfix/cleanup\[13205\]: 40329F9A2D: message-id=<[email protected]>
Aug 26 15:39:33 blue postfix/qmgr\[13190\]: 40329F9A2D: from=<[email protected]>, size=357, nrcpt=1 (queue active)
Note the message id (40329F9A2D) links this to the previous log message.
Thereafter you get the handoff to amavisd (on 127.0.0.1) for spam analysis , etc. followed by delivery to local mailbox.
So to trace the history of an email, you often start at the more recent event, where the "from=" gives you the senders email address. You note the message id and look back for the previous smtpd message which uses this. This message, in turn, will give you the smtpd process number which enables you to find the very first contact.

Mail account empty and not responsive

Hi,
this has been ongoing for a few months, even before I upgraded to mountain Lion. I use mail from my macbook pro and have been using mail attachment tamer without problem for a long time.
I have about 6-7 mailbox (icloud, my wife, 3 exchange for office, etc). all of a sudden, my exchange account has been wiped out on my mac? I works perfectly fine on my ipad, but my inbox is now empty on my mac and is not responsive (clicking on get mail will not work for this account). When I log to my exchange server from safari, everything is fine. Today, though, same thing happenned with two of my wife's inbox.
Also, since a few weeks, mail will close unexpectingly, a dialog box pops up and show a very long log ently....and it says: click to reopen, when I click, mail reopen but same problem with the account blank.
I tried using time capsule to retrieve my inbox, but it creates a new inbox called time capsule ( i would like to have it in my original inbox), anyway, even after retrieval, my inbox is still unresponsive.
I tried to delete the v2 files calles enveloppe... and it recreated them upon relauching mail, but without any help, in fact, it seemd worse (that is when my wife's 2 account were wiped out, so I replaced the old v2-enveloppe files at their original place.
Any idea how to fix it?
my icloud account still works like a charm and my wife's exchange account from the same office as me works too!!!
Thanks
Christian

Lots of others are having problems with Yahoo. You can try turning off two-step verification, or using the Yahoo mail app.

Personal BT Yahoo E-mail Account send out spam ema...

Guess what at 02:36 this morning it appears my email account sent out a SPAM email to all of my contacts including myself containing a link to a website in Spain.
My password is quite complicated, never opened anything dodgy, up to date virus and security protection, not replied to any phishing emails or phone calls I do use social networking but use a hotmail account rather than my BT Yahoo account. I've checked the sent box nothing sent from the actual mail box.
Does this mean my account has been hacked and what needs to be done I've already changed password and checked things like alternate email addresses which doesn't seem to have been changed
This is the first time this has happened so really concerned
Thanks
Simon

Yahoo has the following Help page. I do not know if BTYahoo have an equivalent.
http://help.yahoo.com/kb/index?locale=en_US&y=PROD_ACCT&page=answers&type=narrow&fac=CMS-CATEGORY-YA...

HELP -- mail account created and spamming

Similar Messages

Maybe you are looking for