Exceeded the max defers and email blacklist solution?

atlantis21

Well-Known Member
Sep 18, 2012
49
0
6
cPanel Access Level
Root Administrator
Hi,

I need help with security setting on server.
Some users have this errors when sending mails:

1) MAX DEFERS ERROR
Code:
Domain xxxxxxxx.xxx has exceeded the max defers and
 failures per hour (5/5 (62%)) allowed. Message discarded.
On server this option was set:
Max hourly emails per domain: 200
The percentage of email messages: 125%
Maximum percentage of failed or deferred messages a domain may send per hour: Unlimited
Account package has from 50 - 100 messages per hour

I think, solution for this is to increase number of mails per hour?


3) BLACKLIST
Code:
host smtp1.xxxx.xx [xx.xxx.xxx.xxx]: 550 5.7.1 Your IP address
xx.xxx.xxx.xxx has been found on DNS Block list b.barracudacentral.org and was
therefore refused. For more information see:
    http://www.barracudacentral.org/lookups/ip-reputation
I dont know what to do with that...
In WHM settings alter outgouing port is 26.
And by default users must check "user requre autentification" on mail software.
But users doesn't do that and I have problem. 70% users leave default setings on mail software and call me after get in blacklist..

SpamAssassin is disabled by default
MailScanner is not installed, but I thinking to install that.

So what is better SpamAssassin or MailScanner?
What your recomendation?

And what is best config for Exim Configuration Manager to avoid spam andblacklist?
 

vanessa

Well-Known Member
PartnerNOC
Sep 26, 2006
833
28
178
Virginia Beach, VA
cPanel Access Level
DataCenter Provider
I need help with security setting on server.
Some users have this errors when sending mails:

1) MAX DEFERS ERROR
Code:
Domain xxxxxxxx.xxx has exceeded the max defers and
 failures per hour (5/5 (62%)) allowed. Message discarded.[/CODE

I think, solution for this is to increase number of mails per hour?
[/QUOTE]

Usually if a domain is going over the max emails per hour, the mail log will specifically state so.  This setting should actually do it:

[CODE]
Maximum percentage of failed or deferred messages a domain may send per hour
But you already have this set to Unlimited, so that's odd. This issue is discussed specfically in another thread:

http://forums.cpanel.net/f43/domain...ax-defers-failures-per-hour-5-5-a-296962.html


3) BLACKLIST
Code:
host smtp1.xxxx.xx [xx.xxx.xxx.xxx]: 550 5.7.1 Your IP address
xx.xxx.xxx.xxx has been found on DNS Block list b.barracudacentral.org and was
therefore refused. For more information see:
    http://www.barracudacentral.org/lookups/ip-reputation
This means exactly what it says - the error even gives you a URL to go to. Your mail server got flagged for spam. Sometimes it's caused by legitimate email being reported as spam or sent to a spam trap, other times it's a result of one of your users perhaps doing something they shouldn't. That's really up to you to determine.

So what is better SpamAssassin or MailScanner?
What your recomendation?
I personally prefer SpamAssassin, but some people swear by MailScanner. You can enable outbound spam scanning with SpamAsassin in WHM -> Exim Configuration Manager. I've found that it's necessary to create custom rules for this to really be effective with the least amount of false-positives possible.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,224
463