Search results

But those are easy to block. I think it's whitespread and a lot of us will soon encounter these.

Yes exactly that is what I was wondering about too, hence my question how that is possible. The only thing I can think of is that the abused address is making use of external mailserver from Google and/or has forwards to Google groups or MS mail addresses.

Oke so then it's just check which domains are non-google and non-microsoft and block these, because I don't only had the ones mentioned here but a lot more. I presume those (hacked) accounts then make use of Gmail or Microsoft since the customer gets them from on of those and not directly from...

It's not only firebaseapp, but the most spam started coming them. :)

I doubt it or it must be a lot of mailboxes, because we got 16 different of these messages today. The one from sh4y.de is just an example. As you could se we also got loads from firebaseapp.com until I blocked those and a spoofed other mail address, but almost every mail is coming form a...

The above are header results from spamcop, this is an original header from the last message. Seeing the email content (not displayed) it looks like a bounce message coming back and somehow to us while we are not originating. Received: by 2002:a05:6000:1846:b0:439:c2a3:a2e9 with SMTP id...

I think we need another method. Seems that spammers found another spam method. They send mail from some domain, then reroute it via Gmail to send it to our servers. We got another example of this: Received: by 2002:a05:6000:1846:b0:439:c2a3:a2e9 with SMTP id...

Thank you!

Nothing wrong. It's in your list of things which require a DA license. I think my question was very clear. In other words, why should blockcracking stop working without DA license? I'm no scripter so maybe it's something in one of the files, hence the question.

Not there indeed, but I thought you were talking about the /var/log/httpd and /var/log/httpd/domains logs. But are they still generated in the /home/user when DA is not running anymore? If yes, they can be put manually in the logrotate.d section. What about blockcracking?

The apache (webserver) log rotation is done via normal logrotate. The file for that is /etc/logrotate.d/apache so DA is not required for that if I'm correct. Blockcracking is called from within exim.conf. So existing configs should also still work right?

I've seen this with a friend of mine, who due to some error his license got expired. But also messages from DA itself stating services won't stop. You could also send them a mail or contact form, they won't bite. :) Doublecheck the cronjobs that they are present in the OS so the OS will trigger...

You might want to have a look at my guide (click) to setup a seperate DNS record for your hostname. That works with it's own SOA and SPF records.

Lately our customers are getting a lot of spam. Problem is that we can not block it the normal way, as they are coming via Google. We report every instance, but they keep coming, it looks like this: eceived: from server.mycompany.nl by server.mycompany.nl with LMTP id...

This is still going on? I thought since last post was from january this was already fixed. Do you have a legacy license or normal? With normal license you could send in a ticket. Also check your /usr/local/directadmin/data/templates/custom for entries and what they contain. Which version DA...

Thanks but I don't need to know. It should be working correctly when CB is updating MariaDb. I can't help that anyway. So as long as the user makes his backups, he's fine.

AAAAAAAAAAAARGGGGHHHH 🫨🫨🥴🥴 Darn... I trusted you, forgot to read the fine print. :( ... thinking of counter measures.... We can't make any statements about this.🫢 I'm sure they are already monitoring this and things will be taken care of when it gets too far. Which might indeed be now.

Thanks for your insights, but as you could read, it only happens with the mysqldump command, either when custombuild is doing the backup when upgrading MariaDB or when issueing the command manually. I always to CB updates at early night time and we almost never have a high load then. Also when...

FOR THAT MACHINE. Unless you buy a retail license. You did not buy a DA retail license. I'm going to start baking pies quickly, the combi deal with @sysdev suddenly brought in a lot of orders again. :)

Thank you for the tip, but there are 2 thoughts with that idea. His passwords does not start with ! and we have more passwords with a ! or # in them which don't give issues. Second thing is that even if this would work in shell, it still would not work during the custombuild update of MariaDB as...