Is it bounce email spam?

[niceboy]

Hi,

I did read a few threads on bounce email and it seems to be affecting my server too..

I'm seeing gradual increase in exim que.. currently it is at 600+ emails..

I used ConfigServer Mail Queues to check it shows some thing like this(of course few hundred)..

1VMfFQ-0002lJ-7K		24h	9.8K	[bounce]	[email protected]
1VMfFQ-0002lT-BK		24h	9.8K	[bounce]	[email protected]
1VMfGQ-0002nm-4H		24h	106K	[bounce]	[email protected]
1VMfI0-0002qO-C7		24h	106K	[bounce]	[email protected]
1VMfJR-0002rz-Q5		24h	106K	[bounce]	[email protected]

I opened one of the mail and here is the header..

1VMfFQ-0002lJ-7K-H
mailnull 47 12
<>
1379601024 0
-ident mailnull
-received_protocol local
-body_linecount 208
-max_received_linelength 99
-allow_unqualified_recipient
-allow_unqualified_sender
-frozen 1379601029
-localerror
XX
1
[email protected]

162P Received: from mailnull by my.host.net with local (Exim 4.80.1)
	id 1VMfFQ-0002lJ-7K
	for [email protected]; Thu, 19 Sep 2013 14:30:24 +0000
052  X-Failed-Recipients: [email protected]
029  Auto-Submitted: auto-replied
065F From: Mail Delivery System <[email protected]>
033T To: [email protected]
059  Subject: Mail delivery failed: returning message to sender
054I Message-Id: <E1VMfFQ-0002l[email protected]>
038  Date: Thu, 19 Sep 2013 14:30:24 +0000

As the que is being increasing rapidly, how I'll be able to control it?

Please some body help..

 

[niceboy]

I'm already using ConfigServer Mail Queues to view and deleting bounce emails.

But, how to solve this issue? The mail que starts to fill with bounce emails again in a few hours.

pl help.

 

[Aaron.Edwards]

Check with the Spam origin. Suspect there should be spam sent previously from the server. Now you shoule be receiving more bounce backs. You can identify those as the frozen mails in the exim mail queue.

Can you try # exim -bpr | grep frozen | wc -l

Can you post the output here ?

 

[cPanelMichael]

Hello

Could you provide more information on the specific "bounce email" issue you are having? For instance, could you provide an example of the type of scenario that is occurring? Note that the following document is useful for preventing email abuse on your system:

Prevent Email Abuse

Thank you.