The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

many messages from ymail.com

Discussion in 'E-mail Discussions' started by upsforum, Aug 6, 2013.

  1. upsforum

    upsforum Well-Known Member

    Joined:
    Jul 27, 2005
    Messages:
    446
    Likes Received:
    0
    Trophy Points:
    16
    I can block these messages?
    PHP:
    Event:    failure error
    User
    :    username
    Domain
    :    virtualhost
    Sender
    :    info1@ymail.com
    Sent Time
    :    Aug 62013 1:33:13 PM
    Sender Host
    :    localhost
    Sender IP
    :    127.0.0.1
    Authentication
    :    dovecot_login
    Spam Score
    :    
    Recipient:    coopersherri@ymail.com
    Delivered To
    :    
    Delivery User:    
    Delivery Domain:    
    Router:    lookuphost
    Transport
    :    remote_smtp
    Out Time
    :    Aug 62013 1:33:13 PM
    ID
    :    1V6fVd-0001Tv-Kj
    Delivery Host
    :    mta6.am0.yahoodns.net
    Delivery IP
    :    63.250.192.46
    Size
    :    1.81 KB
    Result
    :    SMTP error from remote mail server after end of datahost mta6.am0.yahoodns.net [63.250.192.46]: 554 delivery errordd This user doesn't have a ymail.com account (coopersherri@ymail.com) [0] - mta1651.mail.gq1.yahoo.com
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    648
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    It looks like that is a bounce message coming from Yahoo. It indicates the email account sent to does not exist. You can ensure this message does not bounce by not sending emails to that email address. If the message was sent to Yahoo by a spammer, you may find the following document useful:

    cPanel - Prevent Email Abuse

    Thank you.
     
  3. upsforum

    upsforum Well-Known Member

    Joined:
    Jul 27, 2005
    Messages:
    446
    Likes Received:
    0
    Trophy Points:
    16
    I applied the rules on "cPanel - Prevent Email Abuse" but today I have same problem, you can see attach screenshot, exim conveys too many of these messages with Info1@ymail.com like sender

    attachment: /https://docs.google.com/file/d/0B5E_-_2tuhrVMHVtZkVfVVRfOUk/edit?pli=1
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    648
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Could you clarify if you are stating that your server is being used to send email with "Ymail.com" as the "from" address? If so, you should be able to determine the username that is sending this email in the delivery event details of the image you provided. You can search this account for scripts with the ability to send email, or suspend the user if they are spoofing the from field through an external email client.

    Thank you.
     
  5. upsforum

    upsforum Well-Known Member

    Joined:
    Jul 27, 2005
    Messages:
    446
    Likes Received:
    0
    Trophy Points:
    16
    is possible that this email account have a vulnerable password? I tried change password, I wait and see what happens tomorrow
     
  6. upsforum

    upsforum Well-Known Member

    Joined:
    Jul 27, 2005
    Messages:
    446
    Likes Received:
    0
    Trophy Points:
    16
  7. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    648
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    It's possible, but it's also possible there is a script that is capable of sending email on this account.

    Thank you.
     
Loading...

Share This Page