Mail server is sending out a large number of spam emails from locked account

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
KennyDeb
Posts: 27
Joined: Fri Sep 12, 2014 10:45 pm

Mail server is sending out a large number of spam emails from locked account

Post by KennyDeb »

My mail server is sending out a large number of spam emails from an account that I have already locked. I have blocked external connections by closing the TCP port on the firewall, but the issue persists.

Please assist me.

Release 8.8.15.GA.3869.UBUNTU16.64 UBUNTU16_64 FOSS edition, Patch 8.8.15_P47.
liverpoolfcfan
Elite member
Elite member
Posts: 1147
Joined: Sat Sep 13, 2014 12:47 am

Re: Mail server is sending out a large number of spam emails from locked account

Post by liverpoolfcfan »

Perhaps they are being sent (relayed) from a different server on your network. Have you checked the logs and/or can you examine the headers of one of the emails?
liverpoolfcfan
Elite member
Elite member
Posts: 1147
Joined: Sat Sep 13, 2014 12:47 am

Re: Mail server is sending out a large number of spam emails from locked account

Post by liverpoolfcfan »

Also, have you "Invalidated sessions" for the account?

Highlight it in the Admin Console, and click on the settings cog at the top right of the screen (beside Help?) and select "Invalidate sessions"
aurfalien
Advanced member
Advanced member
Posts: 72
Joined: Sat Sep 13, 2014 12:01 am

Re: Mail server is sending out a large number of spam emails from locked account

Post by aurfalien »

Hello,

First off I feel your pain.

I had a similar situation where I simply emptied out the deferred queue of that deactivated user.

Read here for general info on how to do this;
https://wiki.zimbra.com/wiki/How_to_del ... ar_account

In my case the closed user account emails were deferred and ended up getting us on several RBLs.

At any rate the referenced article helped me. In addition I restarted Zimbra for good measure once the queue was emptied.
Post Reply