The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Am I spamming or am I being spammed

Discussion in 'General Discussion' started by lamp, Nov 20, 2006.

  1. lamp

    lamp Well-Known Member

    Joined:
    Dec 22, 2003
    Messages:
    111
    Likes Received:
    0
    Trophy Points:
    16
    My mail queue is filled with these. I thought that it was a spammer who attacked one of my clients and that exim was trying to send back to the spammer.... but now I'm starting to wonder. Your thoughts:

    1GmCE3-0000ir-LF-H
    mailnull 47 12
    <>
    1164040951 0
    -ident mailnull
    -received_protocol local
    -body_linecount 66
    -allow_unqualified_recipient
    -allow_unqualified_sender
    -frozen 1164040952
    -localerror
    XX
    1
    dfnypbrner@ypbr.com

    146P Received: from mailnull by [MYMACHINE] with local (Exim 4.52)
    id 1GmCE3-0000ir-LF
    for dfnypbrner@ypbr.com; Mon, 20 Nov 2006 11:42:31 -0500
    036 X-Failed-Recipients: spam@[MYCLIENT]
    031 Auto-Submitted: auto-generated
    060F From: Mail Delivery System <Mailer-Daemon@[MYMACHINE]>
    024T To: dfnypbrner@ypbr.com
    059 Subject: Mail delivery failed: returning message to sender
    049I Message-Id: <E1GmCE3-0000ir-LF@[MYMACHINE]>
    038 Date: Mon, 20 Nov 2006 11:42:31 -0500

    1GmCE3-0000ir-LF-D
    This message was created automatically by mail delivery software.

    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:

    spam@[MYCLIENT]
    mailbox is full: retry timeout exceeded
     
  2. mohit

    mohit Well-Known Member

    Joined:
    Jul 12, 2005
    Messages:
    553
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Sticky On Internet
    hi,
    have you set the "default mail account" on this domain to :fail: or something else ?

    see ya,
    mohit
     
  3. lamp

    lamp Well-Known Member

    Joined:
    Dec 22, 2003
    Messages:
    111
    Likes Received:
    0
    Trophy Points:
    16
    All accounts on the server are set to :fail:

    Are you thinking that exim is trying to send a reply back to the spammer with "Mailbox is full"... If so, is there a way to stop exim from doing that?

    Thanks!
    Lamp
     
  4. kilroy

    kilroy Active Member

    Joined:
    Jun 22, 2002
    Messages:
    38
    Likes Received:
    0
    Trophy Points:
    6
    Looks like your email server has rejected a message and sent it back to the sender but the sender's mailbox is full.

    Although you said your default email (domainusername@yourdomain.com) is set to Fail, it seems to be behaving like it is set to Blackhole. Check out Chirpy's site. Theres a lot of useful info there.

    http://www.configserver.com/free/fail.html
     
  5. Un Area

    Un Area Well-Known Member

    Joined:
    Nov 16, 2006
    Messages:
    78
    Likes Received:
    0
    Trophy Points:
    6
    This things happens when spam comes to a full mailbox and the bounce goes to nowhere. So it get stuck in queue.

    You may decrease this values on /etc/exim.conf for earlier delivery and flushing. I would recomend that you comment the auto_thaw line.

    It may look like this:

    #auto_thaw = 7d
    ignore_bounce_errors_after = 30m -> you can adjust this settings at your choice
    timeout_frozen_after = 1d -> you can adjust this settings at your choice

    ignore_bounce_errors_after will retry a bounce message delivery and fail if not delivered.

    timeout_frozen_after is if a frozen message of any description that has been on the
    queue for longer than the given time will be automatically cancelled at the next queue run

    Bye!
     
Loading...

Share This Page