SMTP Virus or Mail Bomber

Brand new to the mac world (well after a 13 year break) and I am hoping that someone can help. I have recently purchased a mac mini for the (otherwise 100% windows) office and it is being blamed for bringing down our mail servers.
Long story short I have plugged it in and set up an account and installed xcode. I have not gone to any non-apple websites and did not connect to our domain.
Starting pretty much the same time as that setting up was going on, our network admin said that somewhere on our network a mail bomber virus started shooting off emails and then proceded to overwhelm our exchange server (taking advantage of some open relays on the network which should not be there...)
Since them, I have installed ClamAV and it found nothing.
My first question is, is there that will create an smtp server on a mac and then start spamming the heck out of the world that I may have turned on by mistake? I cannot think of anything that I may have done which even kind of points in that direction.
And, is ClamAV a good AV tool?
I can provide any more info that might be necessary, I am not sure what would be useful though other than it is a stock OSX 10.6 with nothing but xcode and now clam AV installed on it.

There are no virus' that will run on a stock Mac running OS X. There have been a couple of trojan's reported over the years, but they are pretty obscur and mostly patched by just using the Software updates from Apple.
Not quite correct. Some of the trojans are not recognized by quarantine in Mac OS X and it's quite possible to download stuff via quarantine-unaware apps, thereby bypassing the protection built into the system. Those engaged in the kind of risky behavior that is most likely to lead to malware are also probably using apps that bypass quarantine.
The ClamAV tool can only find PC virus's on a Mac
Again, not true. ClamXav recognizes Mac malware in addition to Windows malware. I have not only had correspondence with people who have found Mac malware using ClamXav, but I have actually used it myself to detect an old bit of Mac malware.
All this is spelled out in my Mac Virus Guide.

Similar Messages

Why can I no longer send email from my Hotmail SMTP account using Mail?

I can no longer send email from my Hotmail SMTP account using Mail. The connection doctor says it can't connect to the SMTP server. All the settings look to be correct and it was working fine before. I can still email using my iPhone with the same account.

Other may post it is some type of change with your ISP but the simple fact is this happen with Apple Mac Mail all the time.
IMHO Mac Mail is one of, if not the, worst mail program ever written.
Do yourself a big favor and start using some other mail program, any other Mail program.

Outgoing smtp problem in Mail

My outgoing smtp server in Mail Account Information is shown as "offline" and I can't send emails. Can anyone tell me how to solve this problem and what the smtp should read or be inserted as? Thanks.

EDIT SMTP SETTINGS
In Accounts window, select to Edit SMTP Server list...
Select account in the list.(It's not uncommon to find extra SMTP servers listed. When you remove account, Mail does not delete the smtp info. You might need to do some clean up in the list to remove the extras.)
Click on Advanced tab. Enter full email address and password
Name. [email protected]
Add password if it is blank.
Apple defaults to the default ports (25,465, 587) but some servers prefer a custom port. Check to see what port they recommend. Gmail for example likes 465, Outlook.com 587. Verify if they require SSL.
Open Connection Doctor under Window in the Menu bar.
Do you see green light now for your account?

Write error. [CrystalEnterprise.Smtp]: [Error sending mail message to SMTP

Hi,
The below error messgage i am getting while scheduling report in CMC. My report getting refreshed successfully but while posting refreshed file(Excel) it is not posting and throwing below error.
Error Message:
write error. [CrystalEnterprise.Smtp]: [Error sending mail message to SMTP server. Return code: [].]
please provide some help on this.
Thanks
Vivek

Hi Vivek
Mails to the destinations are delievered by SMTP server. Size of the file in the mail depends on the SMTP server.
For example, If SMTP server does not permit file size more than 2MB then that file won't be delievered.
For testing purpose copy the instance generated in Filestore to your local drive and send this instance using your mail client to
desired destination.
You can try sending large size file from your mail client to test SMTP server capacity of sending large size file.
Thanks,
Hrishikesh Parasnis

Mail to blocked SMTP server stalls mails to other SMTP servers

Hi,
I have a particularly weird problem.
In Mail.app I have a Mobile Me account, a personal IMAP account and an Exchange account (working over IMAP etc. as it's Exchange server 2003 so I don't get all the fruity Snow Leopard/Exchange goodness).
The problem I have is this- in the office they block access to external SMTP servers (quite rightly).
If I send a mail through my Mobile Me or personal IMAP account and forget to tell it to use the internal work SMTP server then Mail.app will sit forever trying to connect to the external SMTP server and never time out (or if it does timeout it must be more than a few hours).
This isn't a huge problem in and of itself. However from this point on any mail I send will sit behind the stalled e-mail in the queue and never go out- so even my internal mails hang around not sending.
The only indication of this is the non-stop spinning wheel on the sent items folder and the never-ending 'Connecting to smtp.me.com' in the activity window.
The only way to resolve this is to go to the activity window and cancel all connections to the offending SMTP server. At that point the 'Outbox' folder will appear in my folder list and show me all of the e-mails it hasn't sent. I then have to open each one individually and click send again, at which point they go out (provided they still have the correct internal SMTP server selected).

Ernie,
Thanks for the response. I have previously seen Mail.app fail to send and bring the message back up telling me this- but that usually happens quite some time after trying to send, if at all, and I don't recall ever having this error happen in the office (where they are blocking these ports).
I have had similar issues when travelling and trying to send through hotel networks that typically block port 25- even then I rarely get a failure message (note that this has been happening both on 10.5.x and my clean install of 10.6.x)
I did check to see if the network here was doing some spoofing on SMTP ports but it isn't;
#####:~ #####$ time telnet smtp.me.com 25
Trying 17.148.16.31...
telnet: connect to address 17.148.16.31: Operation timed out
telnet: Unable to connect to remote host
real 1m15.019s
user 0m0.002s
sys 0m0.003s
I get the same 1m15s timeout on port 465 & 587, yet Mail.app never seems to give up trying.
I tried sending to an external SMTP server without SSL to see if the behaviour was any different- but after 15 mins it's still trying so I guess not.
Weird.

Configure SMTP to forward mail to a specific domain

We have migrated all of our e-mail from on premise exchange to Office 365. To support internal applications that send e-mail such as our scanners, we have setup a SMTP relay server using IIS on Windows 2012.
This is working very well however we have some users that when they do a scan they simply enter their e-mail alias (the part before the @ symbol) since that worked when the scanner was sending to Exchange. However Office 365 does not know how to route these
e-mails so they result in a NDR. Since the NDR is not sent to the person creating the scan they do not even know the issue other than they did not receive their scan.
Is there a way to configure the SMTP service on Windows 2012 to send all e-mail that does not have a domain listed in the e-mail address to a specific domain? For example, if someone were to send their scan to myalias it would be delivered to myalias at mycompany
dot com (sorry about spelling it out but it is not letting me post this with a e-m ail address in it even if the address is not valid)

Hi,
You can try to create a SMTP domain in IIS manager(Default SMTP Virtual Server>Domains>New>domain) and then enable "Allow incoming mail to be relayed to this domain" and "Forward all mail to smart host".
In addition, for questions related to IIS, you can also ask in IIS forum for professional assistance:
http://forums.iis.net/
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Cannot connect to smtp sever in Mail or Eudora

Hi All,
I've been reading the forums all afternoon and although there are a lot of similar problems none exactly like mine (or, no solutions that fixed mine!) After a hard drive failure I'm trying to set up Mail with my godaddy account. I can receive, but not send. In the activity window there are two spinning barber poles:
Delivering message (connecting to server "smtp.secureserver.net")
Checking account (connecting to server "smtp.secureserver.net")
But after a short time a third message blinks something about "writing to disk." It doesn't last long enough to read the details.
I tried the "perfect godaddy settings" I found in another thread but they didn't work. And then (and I suppose this is significant) I gave up and switched to Eudora and the same thing happened- I can receive but not send.
Any suggestions?

OK, I discarded the reference to the network as well as the half dozen or so smtp servers I've tried over the course of the day. I still can't change the network (airport) password. I type in the new one and get the message NetCfg wants permission to change access permissions of item PPP Password in your keychain" If I click allow, it goes back to what it was. EEEK!
And I still can't send email - same thing, can't connect to SMTP server.
Suppose I just chuck all this and upgrade to leopard (which I was thinking of doing when my hard drive crashed.) Will all these troublesome settings remain or can I start anew?

Problem with yahoo! SMTP POP server mail account on new upgraded iphone 4.3.5

PLEASE HELP!
I am a California AT&T wireless customer with a new iphone 4 on the iOS 4.3.5 upgraded system and suddenly I am unable to successfully add my Yahoo! email account and have it configured to send/receive my emails. I was able to successfully add my gmail and Microsoft exchange server account, but only problems with the Yahoo! I checked all the settings, have done several add/delete accounts, restore network settings, and retry/reboots, to no avail. This is a seriously annoying problem, it worked with the pre-upgraded older version fine without any problems ever. I continually get the same error message: SERVER UNAVAILABLE, please try again later.
I know this error is inaccurate because all my other email accounts work fine as well as Safari and all other internet connections and apps. It is not a phone thing, it is some yahoo and upgraded software incompatibility issue that no one seems to have resolved yet.
This is a SMTP PUSH POP account, and I have literally tried everything. I have tried all the fixes while connected to wifi, and then tried them just via my 3G cell network connection. I read on a message board about turning on/off SSL, could someone tell me how to do that? When I go into to:
settings>mail accounts>outgoing mail server SMTP>Yahoo! SMTP, everything is grayed out and I can't change any ports or SSL.
When I try to manually add a server, which I was told was a fix, I don't know what to type into the host name. Does anyone know how to help?
I have seen this problems on numerous message boards, even in the UK. I contacted Apple Support, with no success in resolving this problem, had an open case for several days contacted several supervisor personnel, all advised me to contact Yahoo! who do not offer customer care via telephone only online, and nothing there helped to resolve my issue.
PLEASE, PLEASE HELP!
THANKS

Yahoo's servers have been having problems off and on now for close to a month if not longer. There's not much you can do about it except talk to Yahoo, which is kind of like beating your head against a wall. They've had problems like this off and on since as far back as the mid 90's. I gave up on them long ago. Just convert to something else and dump them. It's not worth the headache.

SMTP vs. external mail service

I need to use SMTP on our webserver to send mail via a web form. However, we use an external 3rd party mail service and when the webserver passes the message for a @mydom.tld user to SMTP (Postfix), it gets passed on to dovecot and dumped in a local mailbox on the server (if the user name corresponds i.e. [email protected] => user account 'miles'). If the usernames don't match, _www gets the bounce message in its local mailbox. IMAP and POP are disabled.
DNS MX records point to the external service (with servers at priority 0, 10 and 20).
What I want to happen is for the SMTP server to send the message to the MX servers (the third party service) instead of trying to deliver it itself.
Here's what the SMTP logs say:
Feb 27 13:55:08 obelix postfix/pickup[52526]: E077C5FD068A: uid=70 from=<_www>
Feb 27 13:55:08 obelix postfix/cleanup[52547]: E077C5FD068A: message-id=<[email protected]>
Feb 27 13:55:08 obelix postfix/qmgr[52527]: E077C5FD068A: from=<[email protected]>, size=581, nrcpt=1 (queue active)
Feb 27 13:55:08 obelix postfix/local[52549]: error: od[getpwnam_ext]: No record for user saskatoon
Feb 27 13:55:08 obelix postfix/pipe[52550]: E077C5FD068A: to=<[email protected]>, relay=dovecot, delay=0.04, delays=0.02/0.01/0/0.02, dsn=5.1.1, status=bounced (user unknown)
Feb 27 13:55:08 obelix postfix/cleanup[52547]: E87B85FD068C: message-id=<[email protected]>
Feb 27 13:55:08 obelix postfix/bounce[52552]: E077C5FD068A: sender non-delivery notification: E87B85FD068C
Feb 27 13:55:08 obelix postfix/qmgr[52527]: E87B85FD068C: from=<>, size=2252, nrcpt=1 (queue active)
Feb 27 13:55:08 obelix postfix/qmgr[52527]: E077C5FD068A: removed
Feb 27 13:55:08 obelix postfix/local[52549]: od[getpwnam_ext]: no attribute dsAttrTypeStandard:MailAttribute in record for user _www
Feb 27 13:55:08 obelix postfix/pipe[52550]: E87B85FD068C: to=<[email protected]>, relay=dovecot, delay=0.01, delays=0/0/0/0.01, dsn=2.0.0, status=sent (delivered via dovecot service)
Feb 27 13:55:08 obelix postfix/qmgr[52527]: E87B85FD068C: removed
From postconf -n:
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
enable_server_options = yes
header_checks = pcre:/etc/postfix/custom_header_checks
html_directory = /usr/share/doc/postfix/html
inet_interfaces = all
mail_owner = _postfix
mailbox_size_limit = 0
mailbox_transport = dovecot
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maps_rbl_domains =
message_size_limit = 10485760
mydestination = $myhostname, localhost.$mydomain, localhost, mydom.tld, $mydomain
mydomain = obelix.mydom.tld
mydomain_fallback = localhost
myhostname = obelix.mydom.tld
mynetworks = 127.0.0.0/8,10.198.186.90
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relayhost =
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = _postdrop
smtp_sasl_password_maps =
smtpd_client_restrictions = permit_mynetworks permit_sasl_authenticated permit
smtpd_enforce_tls = no
smtpd_helo_required = yes
smtpd_helo_restrictions = reject_invalid_helo_hostname reject_non_fqdn_helo_hostname
smtpd_pw_server_security_options = cram-md5
smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination check_policy_service unix:private/policy permit
smtpd_sasl_auth_enable = yes
smtpd_tls_CAfile = /etc/certificates/*.mydom.tld.XXXXXXXXX.chain.pem
smtpd_tls_cert_file = /etc/certificates/*.mydom.tld.XXXXXXXXX.cert.pem
smtpd_tls_exclude_ciphers = SSLv2, aNULL, ADH, eNULL
smtpd_tls_key_file = /etc/certificates/*.mydom.tld.XXXXXXXXX.key.pem
smtpd_use_pw_server = yes
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
virtual_alias_maps =
Any and all help appreciated.
Thanks,
Miles

Well, the big question is whether or not this server should accept mail for your domain, mydom.tld.
If it should, then this is appropriate - it sees a message for a domain that it's responsible for.
If, on the other hand, this server isn't responsible for your domain's mail then tell it so.
Right now you've told it that it SHOULD accept mail for mydom.tld:
mydestination = $myhostname, localhost.$mydomain, localhost, mydom.tld, $mydomain
So any mail addressed to any user @mydom.tld is going to get delivered locally. If that's not what you want, remove mydom.tld from mydestination and the message will follow the normal SMTP/MX rules.

Suddenly can't connect to gmail SMTP for outbound mail

I have both a MacBook Air and an IMac. Recently, I lost the ability on both machines to send outbound mail. With Apple Care help on my supported machine (the MacBook Air,) we rebuilt my gmail mail account on that machine and was able to reconnect and send outbound mail. (receiving mail was never a problem)
However, going through all of the same steps on the IMac, it keeps saying :"Gmail (offline) next to Outgoing Mail Server (SMTP) on the account information screen. When I run Connection Doctor, I have a red light next to Gmail SMTP with the message "Trying to log into this SMTP account failed. Verify that the username and password are correct."
Well, the username and password are correct. I just changed them, and can access Gmail from all of my other devices...MacBook Air, iPhone, IPad.
What is really odd it that is was working until about 3 weeks ago.
Any suggestions/ideas? I'm not particularly technical...just find this very frustrating and don't know where to turn.

Robert Wilkins2 wrote:
Thanks for your reply Csound. I know that it's not right to solve my own post, but after thinking the problem was solved, I clicked resolved. I wanted to share my "solution" with the community. Sorry about bad form.
No bad form to worry about, just the reduced attention to your problem that a solved designation causes.
If I remove my gmail account, I'll be able to get all the emails back when I create my new one - because it's imap?
Yes, but check 2 things,
1. That it is setup as Imap (POP is possible but is not the default) and 2 that you have not created any local folders that house mail from the Imap account, if you did then you must export them before removing the account.
What do you mean by verify both passwords? You mean imap and smtp?
I assume I should be using the application specific password in my mail settings?
Thanks,
Bob
Imap and SMTP should be the same, but check.

How to enable logging of IMAP and SMTP connections in Mail

I have set up my own mail server and am able to send and receive mail. However, I would like to enable SSL security for connections from the client application to the mail server. I have created certificate authority, created a root certificate, and created an SSL certificate and key for the server. However, every time I connect, I get a warning message that the certificate is not valid - but the host names and domain names are correct in the certificate and match in the error message. It appears that there is some other problem with the certificate that is not reported in the dialog.
I would like to turn on logging in Mail.app to try to find out what is happening as the connection is made and TLS is enabled to find out why the certificate is being rejected. What options exist for logging SMTP and IMAP connections in mail? How can I find the logging options - should I look for strings in the binary or a resource file?

You cannot log only those changes but you can log *all* changes.
The messages 111008 and 111010 are the ones to look for (as described in this post).

SMTP Bug in Mail using Gmail?

I have numerous gmail accounts set up in Mail and I've noticed some strange behavior since installing ML. In Lion, I could click the reply button and the message would automatically be sent from the address the sender had initially sent it to.
Now I've noticed since ML, I have to make sure to verify that the SMTP is the same as the account I'm sending from or else it will be sent from another gmail account besides the one the message was originally sent to. I went into the account settings and made adjustments for every single gmail account and selected the same SMTP server as the selected account and checked the "use only this server box".
I sent several messages to someone earlier from the default account I normally use to correspond with them (let's call it gmail A) and when that person responded it went to the gmail account that somehow ML now thinks is the default account (gmail B) although I have Mail set up to "send new messages from the account of selected mailbox."
I noticed before I made the changes that the SMTP for all of the gmail accounts showed "Gmail (Offline)" which made me think that it was defaulting to any gmail account Mail could make a connection to, even though the following was the case:
I verified that went I sent the message that it was from the exact account I wanted it to be sent from (gmail A) and it is listed in "sent mail" as being sent from the desired account (gmail A) but the response came to gmail B and it showed that I'd originally sent it from gmail B, even though sent shows I sent it from gmail A.
I find it perplexing that Mail doesn't seem to stick to the same account like before and I do not want people to be receiving mail from me using that one particular address because I infrequently use that account. I guess the only option is to disable it in Mail so that it's not active and be forced to access it on the Gmail site itself?
I'm thinking there is some kind of buggy behavior with Mail in ML and wondered if others are seeing something similar?
Just to make sure that I've made myself clear, this is what I am trying to say:
In other words, before ML, if I sent a message using Mail to someone from gmail acct X, their response would come back to me at X. Now after ML, Mail will send gmail from Y or one of the other gmail numerous accounts I have, even though I have X selected in the inbox. After making adjustments to attempt to "force" gmail X to use SMTP server X, I have noticed that an outgoing message was sent from X but the reply came back to Y.
I'm just curious if anyone else has managed to fix a similar problem?

I guess I wasn't hallucinating since an article was just written about this very issue:
http://www.mcelhearn.com/2012/08/02/bug-in-mountain-lion-mail-sends-replies-usin g-incorrect-accounts/
[quote]
I’m on a few e-mail mailing lists, and I’ve noticed that Mail, in OS X 10.8, has been doing something odd. Generally, if you have multiple e-mail accounts, when you reply to a message, your reply uses the same account the message was sent to. But I’ve been finding that Mail does not correctly choose the account, and have seen a number of messages bouncing because the selected account is not a member of the mailing lists.
[/quote]

Possible malware/virus in mail?

hi there. until yesterday, my mail-software was working pretty well, even after all the upgrades. all of a sudden, all the different mailboxes and smartboxes disappeared, all the different accounts were gone. i had to do it all over again. something i wanted to leave behind after transferring from a pc to a mac. and now, i am encountering the same issues. what's the problem? why is mail all of a sudden giving up? could there be a virus affecting the application? if so: how can i track it without using anti-virus/software?
thanks

Hi nakawashi.
Your description of the problem is too vague to guess what happened. Something that could have caused something similar is bad ownership/permissions in some of the files that Mail uses, as a brody has suggested. Unfortunately, Disk Utility cannot fix any wrong permissions within your home folder. If you want to get this fixed, you'll have to provide a more accurate description of what happened...
Also, you should verify/repair your filesystem (not just permissions), as described here:
The Repair functions of Disk Utility: what's it all about?
my mail-software was working pretty well,
even after all the upgrades.

Problems with authenticated smtp on Mac mail 2

I do support for a small ISP and we are seeing problems with Mac Mail authenticating to the smtp server. The settings that should work are:
outgoing server: asmtp.gorge.net
Username: full email address
Outgoing server port: 2525 or 587
We typically turn on password for the authentication type. In some customers, nothing seems to work. They get an error that their email address can't authenticate. Any ideas on what settings might work for this?

Teri,
Reading the guidance for Outlook Express, I note:
"Step 11. On the Servers tab under Outgoing Mail Server, check the box titled My server requires authentication. Then go to the Advanced tab. Below select the option use same settings as incoming server. (emphasis added)"
In Mail, this is normally the same as specifying authentication of None, and not entering the Username or Password again for the Outgoing Server. This type of authentication, does not result in appending the Username entry (Username corresponds to Account Name in Outlook Express). Mail will authenticate to the SMTP with the Username and Password used for the Incoming, if prompted by the server, and the separate, hard, (and redundant) authentication resulting from using Password in the Outgoing Server entry boxes will cause a failure. However, this type of authentication (which is often called SMTP after POP3, or POP3 before SMTP) is normally conducted on Port 25. In my experience, the use of Port 587 is meant for those SMTP that must have a separate authentication, and where you will see the name altered to include the Username. Hopefully this will work with Port 2525, but I have not confirmed. SMTP after POP3 authentication does not help sending from remote providers, such as found in internet cafes, and this is why some ISPs provide a SMTP that does require separate, Password Authentication.
In the new Mail Setup Assistant, there is now the option to specify to use the same settings, but not enter the Username and Password -- this is not obvious, but well known by some ISPs, but not all -- this is really the same as changing to None in an existing account, and removing the Password and Username entries. Also, in Mail, I would NOT expect any default names to appear, unlike what your Mac Mail instructions imply.
Keep me posted.
Ernie

SMTP Issues - Apple Mail - VERY ANNOYING !

So.
On my iPhone I can connect to my office server, send mail no problem, using port 587, the server address, SSL turned on, with the proper credentials for username and password. When I try to mimic this using the same information on my client end of things, all I get with Apple Mail is the "Connecting to server <xxx.xxx.xxx>" OVER AND OVER AND OVER in the Activity window. All of the ports are properly configured on the router, firewall, etc.. as I am able to send using that SAME SERVER with my phone, and iPad. What gives ? I am pulling my hair out trying to sort this out as it is very frustrating. On the mail server side of things (Kerio Connect) really nothing had changed on the server setup for outgoing mail, and SMTP (port 25, 587, 465) services are configured and ready to go using authentication.
If ANYONE has an information on this, it would be greatly appreciated. Is this a timeout issue ? Is it a handshake issue with the server ? A bit stumped for ideas at this point. Thanks in advance.
I am running 10.7.2 - Mail v5.1 I get the same behaviour on a laptop running 10.6.8
Jeff.

One simple, no-risk thing to try is to click on your various mailboxes while in Mail, and do a Mailbox > Rebuild from the menu for each one.

SMTP Virus or Mail Bomber

Similar Messages

Maybe you are looking for