Recent content by D4NY

Same here, solved with this!

Well, first of all many thanks for your detailed answer. It's always a pleasure to find kind and competent people trying to help other users. All point from 1 to 9 are extremely well detailed and now it's all more clear to me. But having never faced an issue like this it's a bit difficult to...

This is what is read in the queue: And this is what really happens in the maillog: o_O

[UPDATE] 193.24.210.0/24 banned on plesk firewall 54.36.113.226 banned on plesk firewall (confirmed from OVH that one of their ip and listed on https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a54.36.113.226&run=toolpage) Today when i checked the queue i've found other few mails...

Damn!

No, obviously is not the IP of my server. But it's geo located at OVH and i found it in the IP list (whitelist?) in Fail2ban. Anyway i'm banning 193.24.210.0/24 via Plesk Firewall right now (incoming / all TCP and UDP / all ports)

Thank again for replying also on Sunday. Yes, i'm more familiar with Plesk Firewall. I use it for banning some bad ips (all traffic all port) so i prefer use this solution. Just one final question.... Should i disable ip exclusione (recidive ban) from here? IP 54.36.113.226 is here (should...

Maybe i'm tired and a little bit confused but... in the queue i've a lot of Undelivered Mail Returned to Sender that means that someone is authenticating in some way for sending, right? But in the logs i've no evidence of hacked mailbox sending spam. So maybe it's a script/plugin but how to find...

Thank you very much for your detailed answer. I'm not a Fail2ban expert at all to be honest, it will be not easy to setup it following your instructions. In the ban list i've found (recidive) a list in which some of them were good ip and it's worrying from my point of view.

Yes, almost all of the mail in the queue are from 193.24.210.* Should i ban that class from the server?

This is what i've found on the maillog for the last of those mail in the queue [NAME-CHANGED], [SURNAME-CHANGED] and [DOMAIN-CHANGED] are the hidden data of an existing mailbox on my server. [MYSERVERNAME] and [MYSERVERIP] are the hidden data of my Plesk server. Can it be related to an...

Hello everyone, in my mail queue i've found in the last days some outgoing mails (see screenshot). It's not a massive queue with tons of spam (like when a bugged script is running or mail account password hacked). Only a couple of them every 30/40 minutes are added to this list. I would like...

[NEW YEAR UPDATE] During the Christmas holidays i've asked Hetzner if the Storage Box could have problems with the stability of the connection. The answer was something like "the host has quite busy, but not. If you want we can switch the box to another host". Obviously i switched to check if...

The speed seems to be ok, maybe not the fastest in the world but it can't be the problem. The storage box is hosted in Hetzner and we have 10 concurrent connections: It's the stability of the FTP connection that let me think to be the source of the problem. SFTP via SSH was ok 2-3 times but...

UPDATE - Is it possible that a 25mbps download and 18mbps upload speed (tested from my pc not from server) to the FTP Backup Space is too slow for having good time performance? Can't understand why for months everything was fine and in the last 3 days all slow or stuck. Anyway, Happy Christmas...