Server constantly blocked by Barracuda Central

samuelmf

Well-Known Member
May 22, 2006
126
6
168
Perú
My server (Centos with WHM) doesn't have a email traffic
when i see the mail relayers i had 10 sent emails from one domain and 1000 from the root (CSF Emails) i dont see suspect emails
The email queue is in 0 emails

I have request many removals to barracuda central but my server ip is constantly blocked by them.

Someone could help me with that?
 

24x7server

Well-Known Member
Apr 17, 2013
1,911
97
78
India
cPanel Access Level
Root Administrator
Twitter
Hello :),

Have you checked your mail logs ? May be your one of the domain is sending mail through php scripts and due to that your mail server IP was blocked on barracuda.
 

samuelmf

Well-Known Member
May 22, 2006
126
6
168
Perú
My friend, thanks for reply, i've checked the exim log and all the mail activity is from localhost (CSF)
I performed the comand:
grep cwd /var/log/exim_mainlog|grep -v /var/spool|awk -F"cwd=" '{print $2}'|awk '{print $1}'|sort|uniq -c|sort -n

To view the scripts that send spam and the result is this
2 /usr/local/cpanel/whostmgr/docroot
4 /home/mydomain/public_html/web
7 /root
20 /
2862 /etc/csf
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,218
463
I have request many removals to barracuda central but my server ip is constantly blocked by them.
Hello :)

Are you able to obtain more information about why your server was blocked? Does the blocked report provide any additional details upon request?

Thank you.
 

samuelmf

Well-Known Member
May 22, 2006
126
6
168
Perú
No my friend, Barracuda Central does not provide info about why my server is being blocked.
All the security tips on the link are already set
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,218
463