Spam problem ?

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
beable
Posts: 8
Joined: Fri Sep 12, 2014 11:29 pm

Spam problem ?

Post by beable »

Hi all,

i don't understand what's happening... maybe spamming problems...

daily Zimbra send a lot of emails to various email address.

My zimbra version is 7.1.3 (FOSS Edition) installed on to Centos 6.2 64bit.
These are config files:
/etc/named.conf*:

[QUOTE]options

{

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

forwarders { 192.168.0.2; };

directory "/var/named"; // the default

};
zone "localhost" {

type master;

file "localhost.zone";

};
zone "mydomain.it" {

type master;

file "mydomain.it.db";

};

[/QUOTE]
/var/named/localhost.zone:

[QUOTE]$TTL 86400

@ IN SOA @ root (

42 ; serial (d. adams)

3H ; refresh

15M ; retry

1W ; expiry

1D ) ; minimum
IN NS @

IN A 127.0.0.1

IN AAAA ::1

[/QUOTE]
/var/named/mydomain.it.db

[QUOTE]$TTL 1D



mydomain.it. IN SOA zimbra.mydomain.it. admin.zimbra.mydomain.it. (

200612060 ; serial

2H ; refresh slaves

5M ; retry

1W ; expire

1M ; Negative TTL

)



@ IN NS zimbra



zimbra IN A 192.168.0.149 ; The server running DNS

; aliases
mail IN CNAME zimbra ; sendmail host



@ IN MX 10 zimbra.mydomain.it.[/QUOTE]


this is a part of zimbra.log (suitably modified):
[QUOTE]an 15 15:45:10 zimbra postfix/qmgr[12796]: 179D53A0195: from=<>, size=2873, nrcpt=1 (queue active)

Jan 15 15:45:10 zimbra postfix/smtpd[19401]: disconnect from localhost.localdomain[127.0.0.1]

Jan 15 15:45:10 zimbra amavis[12098]: (12098-03) FWD via SMTP: <> -> ,BODY=7BIT 250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 179D53A0195

Jan 15 15:45:10 zimbra amavis[12098]: (12098-03) Passed SPAMMY, [127.0.0.1] [127.0.0.1] <> -> , Message-ID: , mail_id: d4CjERFp4b7q, Hits: 7.1, size: 2430, queued_as: 179D53A0195, 277 ms

Jan 15 15:45:10 zimbra postfix/smtp[19404]: C2C453A01B6: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=0.34, delays=0.05/0.02/0/0.28, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 179D53A0195)

Jan 15 15:45:10 zimbra postfix/qmgr[12796]: C2C453A01B6: removed

Jan 15 15:45:10 zimbra postfix/smtp[19402]: 68BD13A01B5: to=, relay=smtpauthenticated.it[xx.xx.xx.xx]:25, delay=5.4, delays=0.01/0.01/2.5/2.9, dsn=2.0.0, status=sent (250 ok 1326638710 qp 24004)

Jan 15 15:45:10 zimbra postfix/qmgr[12796]: 68BD13A01B5: removed[/QUOTE]
Anyone can tell me a way to solve this issue ???
thanks
phoenix
Ambassador
Ambassador
Posts: 27278
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Spam problem ?

Post by phoenix »

Posting the DNS configuration files for your LAN DNS server doesn't serve any useful purpose for this problem. ;) I'll also move this post to the correct forum.
[quote user="beable"]Anyone can tell me a way to solve this issue ???[/QUOTE]I don't know, from your description, what the exact problem is. Are you seeing lots of spam in your mailboxes? Lots of spam in the deferred queues? Lots of spam being sent by your server? If it's a problem of spam arriving at your server, have you looked at the headers of the email to determine what the problem is? Please give an exact description of what problem you're experiencing.
Have you searched the forums and wiki about this problem and tried some of the techniques to improve the anti-spam system or to diagnose the problem? If you've done those things what were the results?
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
beable
Posts: 8
Joined: Fri Sep 12, 2014 11:29 pm

Spam problem ?

Post by beable »

in these days i'm seeing i Lots of spam in the deferred queues to only 3 email address with the result of SMTP authenticated blocked after 1000 sent email.
These 3 address emails are not real address from my 3 customers, now blocked.
the strangeness is the exponential growing of the deferred queue, caused from genny@existentdomain.it; every hour i delete the queue.
sorry for the headers of the emails.. i have no more the email that cause the problem

thanks
phoenix
Ambassador
Ambassador
Posts: 27278
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Spam problem ?

Post by phoenix »

[quote user="beable"]in these days i'm seeing i Lots of spam in the deferred queues to only 3 email address with the result of SMTP authenticated blocked after 1000 sent email[/QUOTE]The other part of my post was this question:
[quote user="10330phoenix"]Have you searched the forums and wiki about this problem and tried some of the techniques to improve the anti-spam system or to diagnose the problem? If you've done those things what were the results?[/QUOTE]
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
Post Reply