The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

No email address but still spamming, bug?

Discussion in 'General Discussion' started by rhm.geerts, Apr 6, 2015.

  1. rhm.geerts

    rhm.geerts Active Member

    Joined:
    Jul 29, 2008
    Messages:
    43
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Maastricht
    cPanel Access Level:
    Root Administrator
    We have a user with a domain for example userdomain.nl. Contact email address for this account is info@userdomain.nl.

    The website for userdomain.com is resided at our cpanel server.
    However, all e-mail is handled by an external anti-spam server. MX records are set to that external system, remote mail exchanger.

    In the user account under e-mail, no single email address is present, except ofcourse for the systemaccount.

    Now this is happening:
    Code:
    2015-04-06 13:20:31 1Yf54w-0002j6-SI <= info@userdomain.nl H=(107.182.17.136) [107.182.17.136]:49954 P=esmtpa A=dovecot_login:info@userdomain.nl S=4044 id=ed7e6721084e8f572d59ca2de1@107.182.17.136 T=" Amazon sellers and affiliates \32\2
    etc. Shortly said, this is authenticated login and spam is being send this way.

    As far as I'm concerend this is a Cpanel bug. No email address which does not exist on the server, should be able to login to dovecot. But it is happening.

    It's now the 3rd time this happens and we're getting tired of it.

    Why is it possible that somebody can authenticate for an email address which does not even exist on the server but is only set as contact email addres?

    How can this be fixed?
    Please advise.

    Cpanel version WHM 11.48.2 (build 3)
     
    #1 rhm.geerts, Apr 6, 2015
    Last edited by a moderator: Apr 6, 2015
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,743
    Likes Received:
    662
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello,

    Could you open a support ticket using the link in my signature so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome.

    Thank you.
     
    rhm.geerts likes this.
  3. rhm.geerts

    rhm.geerts Active Member

    Joined:
    Jul 29, 2008
    Messages:
    43
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Maastricht
    cPanel Access Level:
    Root Administrator
    Hello.

    The ticket number is 6363963.

    In the ticket I wrote I had to change things to give you access, but I already did.
    Please tell me if you're ready, so I can restore the original host and key settings again.
     
  4. rhm.geerts

    rhm.geerts Active Member

    Joined:
    Jul 29, 2008
    Messages:
    43
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Maastricht
    cPanel Access Level:
    Root Administrator
    Hello Michael.

    Jason fixed it for me.
    I'll explain for future references or if anybody else might encounter the same issue.

    The cause was not the contact email address but the quota.
    Since the account was over quota, cpanel was not able to make a lock on the maildir and for that reason none of the email accounts present were displayed in Cpanel itself under the user account.
    This gave the impression no email addresses were present, but it made sending mail through the accounts possible, because in fact they did exist.

    After temporarily giving the account unlimited quota, the email accounts became visible again. I removed them and set the quota back to the original quota.

    Problem fixed.

    Thank you and especially Jason for the support and help!
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,743
    Likes Received:
    662
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
Loading...

Share This Page