Unwanted outbound emails

General eFa discussion
Post Reply
booola
Posts: 12
Joined: 12 Oct 2017 13:52

Unwanted outbound emails

Post by booola »

Hi guys,

we use eFa only for inbound mails and most of spam mails are filtered, but some crap goes (may be) through and is queued in Mail Queue on the same server

Mail Queue Viewer

-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
01BC51005E8 6062 Thu Oct 12 08:33:48 MAILER-DAEMON
(connect to roadrashkit.com[X.X.X.X]:25: Connection timed out)
julieztch5pd@roadrashkit.com

001CA10061A 6906 Thu Oct 12 11:38:07 MAILER-DAEMON
(connect to chiclycute.com[X.X.X.X]:25: Connection timed out)
milenazse248w@chiclycute.com

23F5E10054F 6879 Wed Oct 11 19:18:06 MAILER-DAEMON
(connect to virtualexpoindia.com[X.X.X.X]:25: Connection timed out)
stanislavac4y3pr1kopriva@virtualexpoindia.com

-- 31 Kbytes in 3 Requests.

How is that possible, that the messages are in queue?
And then email addresses are autogenerated and without rDNS. I blocked communication with the X.X.X.X address on FW.
Thank you for suggestions.
JB

BTW, great system and nice work, thank you!
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: Unwanted outbound emails

Post by pdwalker »

I don't understand.

Are these messages in the incoming queue, or outgoing queue?
booola
Posts: 12
Joined: 12 Oct 2017 13:52

Re: Unwanted outbound emails

Post by booola »

I'm sorry, in outgoing queue. It is last version of eFa (3.0.2.5-HyperV) and the system is implemented for about 7 days. This morning there were 13 outbound mails, not only for X.X.X.X server mentioned in the first post.

Mail Queue Viewer

09AC810067F 3308 Thu Oct 12 18:28:59 MAILER-DAEMON
(host mx2.webcloud.cz[94.124.105.178] said: 454 4.7.1 : Relay access denied (in reply to RCPT TO command))
newsletter@parkinn-hotels.cz

0735F1006C0 4118 Thu Oct 12 22:52:00 MAILER-DAEMON
(connect to www.tophosting.cz[93.185.104.25]:25: Connection refused)
apache@www5.tophosting.cz

D736C1006D7 7123 Fri Oct 13 00:33:10 MAILER-DAEMON
(connect to hangoutcashcode.com[185.140.110.3]:25: Connection timed out)
marinagf6m98jdivis@hangoutcashcode.com

A2C1F1006DE 6983 Fri Oct 13 00:33:01 MAILER-DAEMON
(connect to tailieuit.com[185.140.110.3]:25: Connection timed out)
alexandran89x1fk@tailieuit.com

A02F5100679 4383 Thu Oct 12 18:23:07 MAILER-DAEMON
(host mx.yandex.ru[87.250.250.89] said: 451 4.5.1 The recipient has exceeded their message rate limit. Try again later. 1507867709-dCpDSEljx4-8TB87AM9 (in reply to end of DATA command))
fushionlon@yandex.com
..........
..........
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: Unwanted outbound emails

Post by pdwalker »

Ok, one thing

You said your system is only for incoming mail, and yet we have messages in your outgoing queue, so either your understanding is incorrect and it's used for outgoing mail as well, or something else.

Next, you should search for these messages in your message listing and find out where they came from.

Of the 5 messages, this is why I think they are still in the queue

1) not sure, don't know anything about your system config
2) the remote server is probably blocking you because they think you are spammers
3) not answering, either the host is down, or they think you are spammers
4) same as #3
5) they are restricting your mail delivery - because they think you are spamming?

You might want to find out what kind of messages are sent from your system and why these providers are not accepting your mail.

Good luck.
booola
Posts: 12
Joined: 12 Oct 2017 13:52

Re: Unwanted outbound emails

Post by booola »

Yes, that's correct, my fault. I thought that all mails from Exchange server go through another relay server.
So, the problem is whenever Exchange server wants to reply to non-existent address.
Thank you.
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: Unwanted outbound emails

Post by pdwalker »

So is your issue resolved?
booola
Posts: 12
Joined: 12 Oct 2017 13:52

Re: Unwanted outbound emails

Post by booola »

Yes, it is. Thank you!
Post Reply