The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Automatically block account based on deferred messages

Discussion in 'E-mail Discussions' started by workflux, Sep 22, 2016.

  1. workflux

    workflux Registered

    Joined:
    May 19, 2008
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Hi,

    I've noticed that invariably, when a client's email account gets compromised by virus/password theft, and starts sending SPAM, the "deferred messages" count of the domain goes to the roof.
    This causes me problems because my IPs get blocked by anti-SPAM lists and subsequently other clients complain.

    So I was thinking if there's a way to automatically detect if an account is getting a high number of deferred messages in order to block specific e-mail account or send me an alert about it to manually react to the fact.

    It would be great if it can be done through CPanel or if somebody share's a cron job to do it but in case nobody's done it, my questions are only:

    1.- Where can I PROGRAMATICALLY check the deferred messages count that appears on "View Sent Summary"?

    2.- Is there a way to check (also programatically) what is the offending account (or accounts)?

    Thank you in advance for any help!
     
  2. ruzbehraja

    ruzbehraja Well-Known Member

    Joined:
    May 19, 2011
    Messages:
    383
    Likes Received:
    7
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Have you used:

    WHM >> Tweak Settings:

    Maximum percentage of failed or deferred messages a domain may send per hour
    The maximum percentage of a domain’s outgoing mail that can consist of failed or deferred messages. Once the domain exceeds this percentage, it is temporarily blocked from sending mail.
    • Unlimited default
    • %
    and

    Number of failed or deferred messages a domain may send before protections can be triggered
     
  3. workflux

    workflux Registered

    Joined:
    May 19, 2008
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Hi, thank you very much for your response. I've actually tried tightening that parameters but it blocks whole domains and generates more problems. I'd love to be able to block individual offending accounts through "exim custom rules" but I need access to the number of deferred messages and can't find the correct place to get it.
     
  4. workflux

    workflux Registered

    Joined:
    May 19, 2008
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Hi, any additional info about this? Just had the problem with another account and it again sent deferrals to the roof. Preventing that per e-mail account would be a great tool against outgoing SPAM.
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    648
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
Loading...

Share This Page