The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Block mails from fake accounts

Discussion in 'E-mail Discussions' started by peppos, Jul 28, 2014.

  1. peppos

    peppos Member

    Joined:
    Jun 19, 2007
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    Hi,

    Is it possible to block all emails sent from non existing accounts?

    When there's an abuser sending lots of spam, usually the sender's address is whatever_name@mydomain.com. So, if that account "whatever_name" does not exist, then the mail should be block.

    Thanks,

    P
     
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,448
    Likes Received:
    195
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
  3. peppos

    peppos Member

    Joined:
    Jun 19, 2007
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    That's for incoming mails. I'm actually asking for outgoing.

    if you have created 2 accounts in cpanel (a@domain.com & b@domain.com) all mails sent from domain but not from those 2 accounts should be blocked.
     
  4. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,448
    Likes Received:
    195
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Are you talking about emails sent from scripts?
    How does anyname @ yourdomain.com send email out of an account?
     
  5. cPanelPeter

    cPanelPeter Technical Analyst III
    Staff Member

    Joined:
    Sep 23, 2013
    Messages:
    569
    Likes Received:
    15
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    Many times when you see emails being sent from non existent accounts, they are not actually being sent from your server. Have you actually confirmed that this is what is happening? I ask because most likely what is happening is that you're the victim of a Joe Job. This is where email is being sent out (not necessarily from your server but another compromised server) with forged from and reply-to headers of non-existent accounts at a domain on your server.

    If you have the default address set up (as Infopro mentioned) to deliver those messages rather than bouncing them with "Fail no such user here", then you will get a ton of them and it looks like they are coming from your server when in fact they really are not.

    Unless there's a script involved on the account in question, there is no way to send email from a non-existent account.
     
Loading...

Share This Page