SPAM from our email server

I received an email from [email protected]
Subject: Email Feedback Report for IP (our email server's IP address)
This is an email abuse report for an email message with the message-id of F07FB3A7-2B7C-4DD7-BD3B-D976E24D398D@(ourdomain).com received from IP address (our email server's IP address) on Wed, 26 Oct 2011 12:03:22 -0400 (EDT)
So it looks like SPAM was sent from our email server from the email address above (F07FB3A7-etc...).  I searched log files but I can't locate anything with that address.  There are no accounts with that name on the server.  Is it possible that someone created that account, sent out SPAM, then deleted the account?  I'm puzzled.

Post the unexpurgated contents of the postconf -n command, and we'll have a look at the usual suspects.
We'll also want a look at the headers from the feedback message, as well as the reported spam.  This to see whether the feedback message looks legitimate, and what the reported spam message contained.
And search for the time of the message in the logs; that long hexadecimal string is in the format of a GUID/UUID valud, and not a user.   Which might mean it's tied to a message, or to a user.  (The message headers can show more about this.)
(For the GUIDs associated with users, look around for a user in your Open Directory or your local database with a matching value.  This can be visible via Workgroup manager inspector, or via the GeneratedUID value that Directory Utility can display for the user.  For the messages, dig around in the SMTP server logs.)

Similar Messages

  • I have received a spamming complaint from my email server - help?

    I have received a spamming complaint from my email server that I was not aware was happening.  They want me to clean my computer, what do I do first?

    There are a few trojan horse programs that can infect a Mac, but none found in the wild send out spam messages, so those aren't a concern for your current situation, and if you stay current with your updates to Mac OS X, Apple's blocked most of those trojans that do exist (there's a new update just today, I believe, for one discovered recently). Overall I don't see much need for antivirus utilities as long as you exercise common sense and caution in what you download from the web. Those trojans all depend on unsuspecting users downloading fake software from unsecure sites. Download only from sites you can trust - the software developer for applications - and don't open attachments you aren't expecting - and you should be fine. If you do feel the need for some sort of scanning, the freeware ClamXav should be sufficient.
    Regards.

  • Is there a way to import contacts from an email server to an iphone?

    Is there a way to import contacts from an email server to an iphone?

    not that I'm aware of. 

  • I changed email servers but mail is attempting to be sent from deleted email server

    We have a new email server so I deleted the email account associated with the old server and then added a new server.  When I try to send an email, it is finding the old SMTP server and attempts to send using that (which of course fails since I no longer have an account there.  I can't find any vestage or reference to my old email server anywhere on my iPhone but it is still finding it.  Help, please?

    Hi Nick,
    From your description, I would like to clarify the following thing:
    A user with Full Access permission can’t send email from the shared mailbox unless they also have Send As or Send on Behalf permission. Please grant your IT mailbox send as permission or send on behalf permission to check the result.
    For your reference:
    Shared mailboxes in Exchange Online
    https://technet.microsoft.com/en-us/library/jj966275%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396
    Hope this can be helpful to you.
    Best regards,
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Amy Wang
    TechNet Community Support

  • My contacts are receiving spam from my email, how can I stop?

    What is the best way to scan for virus on my MacBook Pro (OS X 10.5.8).  Yesterday at 10am I started receiving numerous bounced emails in my inbox from random contacts in my address book-some that are very old and I haven't used for years (hence the bounce-back).  Also had a few friends email me back saying they were getting spam from me.  Shut down my computer and it seemed to stop, however this morning at 10am it started all over again!  Yikes!  I have three mail accounts including yahoo mail which is where some of the contacts came from originally, although I have since added them to my Mac address book. What is my best course of action?  Thanks for your help!!!

    Yahoo email is famous for beiing hacked and has nothing to do with your computer. Most of the time.
    That is not to say it is your Mac that is doing this.
    If you really think it is something on your Mac then turn it off for a day and see if these contacts are still gettig emailsfrom you on that day. If they are and you did not use your computer that day then it is your Yahoo email system that has been hacked.
    Also what you could do right now is log on to your Yahoo email and change the password. If the emails stop then again it is your Yahoo email acount that has been hacked and not your Mac.

  • Spam filter for email server

    Depends on what you want to pay. There are various ways of doing this.
    1. block at your firewall. I have a watchguard and this acts as my first line of defense.
    2. Install an app on your mail server - I have Symantic for Exchange as my second line 
    but then you can go and signup to outside organisations such as messagelabs to handle all your filtering for you.

    hi all,
    im running postfix+dovecot for an email server and i want a spam filter to go infront of postfix so it can filter out spam before it gets anywhere near my email server
    also i imagine with spam filters you can set your own spam policies and allow good senders and block bad senders
    many thanks
    rob
    This topic first appeared in the Spiceworks Community

  • Spam getting past email server

    Why has my email server started letting so much spam get through?  What can I do to stop it?  Thanks.

    Your question is too vague.
    First off you need to realize you will not stop all spam. Mega-corporations have spent billions trying to 'fix' spam, so don't think you're going to solve the issue yourself.
    On that basis, the best you can hope for is reducing spam to a manageable level - at least as far as your users' mailboxes are concerned. However, you don't state how much spam you're getting... are you getting 1? 10? 100? 10,000 spam messages an hour? so it's impossible to tell whether you're in the realm of normal behaviour or not.
    You also don't state whether the spam is directed at your domain, or specific user mailboxes?
    Are some users getting more spam than others?
    Is the spam actually getting to users' mailboxes or is it getting blocked before it gets that far?
    Also, you state your server has 'started letting so much spam through', so the most pertinent question is what have you changed - these things don't radically change on their own so the chances are something's changed on your server that's having an effect.
    So, more data please.

  • Is there a way to differentiate from two iPod touches that are on the same iTunes acct when using iMessage? When one child sends a message the other gets it and it says it's from our email address.

    Both of my sons have iPod touches. I set them both up on my iTunes account. The problem we are having is when they are using iMessage. When one sends a message the other also receives it. The message is labeled as from my email address. Is there a way to differentiate the 2 iPods?

    See:
    MacMost Now 653: Setting Up Multiple iOS Devices For Messages and FaceTime

  • Clients Time-Out When Retrieving Large Files  From Our PureFTPd Server

    Hi, not sure if this is the right place to get help, but didn't know where else to look. And let me begin by saying I'm not a server admin by trade, but that is the role I've fell into at a design firm. So please bear with my lack of knowledge on some of the more technical details.
    We have OS X Server 10.4.11 running here with PureFTPd installed and managed through PureFTPd Manager application. It has been fairly reliable for us for the last 2-3 years once the initial setup craziness was complete.
    But lately we've had 2 clients say that they've had difficulty downloading larger files from us. They get a time-out or error message on their end. They are most likely using Windows Explorer on a PC to do the transfer, which has always been the easiest method for our clients.
    One client had no problem getting files up to 14MB or so. But when trying to download a certain file that was about 80MB, it would not work. I tried different things here, and she tried multiple times, but no luck. I tried zipping the file to see if that would help, but no luck.
    Then another client had a similar problem today with a file that was only 25MB.
    We don't send large files very often, so I'm not sure if this is a recent thing or not. It seems like we've received some large files recently though.
    In PureFTPd manager, I usually leave all of the fields in the Transfers tab empty for all users. I didn't see anywhere else that would seem to impart a file-size limitation.
    • Any ideas at all?
    • If not, any other forums that I could search for help on? It looks like the developers site for PureFTPd Manager hasn't been updated in a year or two.
    Thanks in advance!

    Some years back I had trouble at a customer that had a ADSL using PPPoE connection to their ISP.
    Their router/modem (Speedtouch) couldn't cope with the LAN MTU when they sent files out so I had to lower it on their computers (running Panther?) ethernet interface from 1500 to 1492 (PPPoE overhead was 8 byte). The communication used to stall at about 25MB but the MTU change helped resolving that.
    My guess is that the router had to fragment (split in two) all outgoing packets it recived from the LAN computers and it just couldn't cope after a while.
    In your case it can be other network related things too like maybe needing traffic prioritizing, if receiving a lot of traffic from Internet and trying to send at the same time.

  • How do I stop my Iphone 6 from deleting messages from my email server?

    I am new to Apple phones.  When I trash messages on my phone, they are also eliminated from my server.  How do I tell it to leave them on the server and just delete from the phone?

    I have tried that and it doesn't work for me. I can set everything up, but then it won't get mail. At all.. Says server isn't responding. My issue with imap is that it won't create copies like POP does. It downloads directly from the server. So whoever is reading my email (my husband) on his phone, if he deletes it, then it's deleted from my phone, or email client as well. It's a sticky business. Any suggestions?
    IMAP is not good for a shared email account for this very reason (but is great for a single reader who uses many devices for access). The best suggestion I have is to create separate email accounts, if possible. Otherwise, you'll both really have to be conscientious about not deleting emails.

  • Switching from external Email server to Exchange, Understanding Dis-Joint, and a little help please

    I'm pretty new at installing exchange myself and have never done Exchange 2013
    While going through the install help online I came across disjointed domains. I think I'm over thinking this but here is what I have and what I want to do. Any other tips would be great as well. 
    Customer currently has a domain, internal dns and email through GoDaddy. Lets call it smallschool.com 
    Internally they have a new Active Directory (2012) and the domain is in.smallschool.com. There is no external DNS except GoDaddy. I plan to use that (if that's ok). 
    I have built a Hyper-V for Exchange 2013 and have installed pre-requisites. 
    My Current Question are...
    Do I need to set up dis-joint dns suffix and modify the msds-allowdnssuffix attribute? I have the instructions, I just don't know if this is a must or not with the domain names like they are.
    Am I going to run into any trouble switching GoDaddy's email to Exchange Server? Any Tips?
    Thank You, 
    fixitrod

    Hi fixitrod,
    Agree with Ed Crowley. If your original used domain is smallschool.com in GoDaddy, I suppose your email address would be
    [email protected]
    If that is the case, when you deployed a new AD domain with in.smallschool.com, we can create an accepted domain for smallschool.com in Exchange 2013. If you want to still use Godaddy for external message sending and receiving, you can create an external
    relay domain. For more information about configuring external relay fomain, please refer to:
    http://technet.microsoft.com/en-us/library/jj657491(v=exchg.150).aspx
    Regards,
    Winnie Liang
    TechNet Community Support

  • Why am I not able to download all the messages from the email server, only few are downloaded, the rest are not? Things were fine until last week.

    I've tried all the suggestions including deleting the inbox.msf etc. I have also tried uninstalling and reinstalling Thunderbird, but none of them seem to work.

    Is it hanging on the same message each time? If so go to your email providers web mail site and log into your account there. Read and delete the problem message and see if the remaining messages download.

  • After automatic update of the latest beta version, I cannot download email messages from my email server, CalPoly. CAUSED by ESET?

    When I booted I was asked a question whether I should allow connections to my network. It seemed strange, but I fell for it and allowed. Upon reflection, it was probably a phishing expedition that wrecked my ability to download messages and possibly inserted a trojan horse. I am running a MacPro with Mountain Lion OSX. I have very good protection software.
    I can obtain messages on my iPhone, so it is not a provider problem.
    Help!!

    <blockquote>
    My days of hacking around are over.</blockquote>
    In that case your days of email clients are also probably coming to a close.
    Less and Less are the ports and protocols being considered by AV companies and others as everyone uses web mail. Like you, I use ESET and have had no problems with the NOD32 anti virus product. But I have heard some rather sad tales about the Suite being overly protective. In this day of ubiquitous firewalls in AV products (In my opinion a very bad thing) Only Microsoft products can be expected to work out of the box as the market leading office software vendor. The anti virus vendors firewalls +Anti virus products generally account for about 95% of mail collection issues. With incorrect settings making up about 2 or 3 percent of the remainder. Real Thunderbird bugs do exist, but are only a very tiny part of the total.

  • Repectfully tell someoen your email server does not accept mail from open relay?

    Bryce Katz wrote:
    "According to our email server, your email is being rejected due to a serious misconfiguration on the sending email server. Please have your IT department contact us for additional information. We cannot make adjustments to servers we don't own, but we'll happily work with your IT department to resolve this issue."
    I liked it until the "happily work with your IT department" part.. It's one thing to say they can contact them, but to say "happily"..... Nope nope nope nope...

    So I got a call from one of my co-workers this morning regarding an email that he has been trying to receive from a (vendor?) regarding generator information.  The domain is powersgenerator.com.
    In looking in my logs, sure enough there is a message in my amavis log regarding open relay:
    Open relay? Nonlocal recips but not originating:
    To the question:
    What is the best way to word an email to this person (in a respectful business manner) to tell him (probably not in IT at all, and will have no idea what I am talking about) the reasons his email was rejected?  Some examples would be awesome.
    Thanks!
    This topic first appeared in the Spiceworks Community

  • Why do we have to manually recreate our accounts each time the email server goes down?

    On very infrequent occassions (fortunately), our email server will go off-line.  Whenever this happens, every one of us has to login to the Blackberry Internet Service website to reenter the account information.  This is very annyoing.  Why doesn't it just automatically reconnect when the email server goes back up?

    No idea why. I'm guessing the the BIS system goes to check for email and can't find the account.  Then it sends you the email to revalidate and it won't check again until you do.  If it was setup to check too many times with, say, a wrong password, it may lock the account.  This is only a guess on my part. 
    Your people with accounts setup like this should know how to go to their email setup on their device and validate the password.  It's not very complicated and takes only a moment.
    1. Please thank those who help you by clicking the "Like" button at the bottom of the post that helped you.
    2. If your issue has been solved, please resolve it by marking the post "Solution?" which solved it for you!

Maybe you are looking for