Recent content by D4NY

My server is currently running Pleask 18.0.69 update 4. Is my Roundcube 1.14 safe?

Good morning everyone. I got something similar and i don't know what to do...

Same here, solved with this!

Well, first of all many thanks for your detailed answer. It's always a pleasure to find kind and competent people trying to help other users. All point from 1 to 9 are extremely well detailed and now it's all more clear to me. But having never faced an issue like this it's a bit difficult to...

This is what is read in the queue: And this is what really happens in the maillog: o_O

[UPDATE] 193.24.210.0/24 banned on plesk firewall 54.36.113.226 banned on plesk firewall (confirmed from OVH that one of their ip and listed on https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a54.36.113.226&run=toolpage) Today when i checked the queue i've found other few mails...

Damn!

No, obviously is not the IP of my server. But it's geo located at OVH and i found it in the IP list (whitelist?) in Fail2ban. Anyway i'm banning 193.24.210.0/24 via Plesk Firewall right now (incoming / all TCP and UDP / all ports)

Thank again for replying also on Sunday. Yes, i'm more familiar with Plesk Firewall. I use it for banning some bad ips (all traffic all port) so i prefer use this solution. Just one final question.... Should i disable ip exclusione (recidive ban) from here? IP 54.36.113.226 is here (should...

Maybe i'm tired and a little bit confused but... in the queue i've a lot of Undelivered Mail Returned to Sender that means that someone is authenticating in some way for sending, right? But in the logs i've no evidence of hacked mailbox sending spam. So maybe it's a script/plugin but how to find...

Thank you very much for your detailed answer. I'm not a Fail2ban expert at all to be honest, it will be not easy to setup it following your instructions. In the ban list i've found (recidive) a list in which some of them were good ip and it's worrying from my point of view.

Yes, almost all of the mail in the queue are from 193.24.210.* Should i ban that class from the server?

This is what i've found on the maillog for the last of those mail in the queue [NAME-CHANGED], [SURNAME-CHANGED] and [DOMAIN-CHANGED] are the hidden data of an existing mailbox on my server. [MYSERVERNAME] and [MYSERVERIP] are the hidden data of my Plesk server. Can it be related to an...

Hello everyone, in my mail queue i've found in the last days some outgoing mails (see screenshot). It's not a massive queue with tons of spam (like when a bugged script is running or mail account password hacked). Only a couple of them every 30/40 minutes are added to this list. I would like...

[NEW YEAR UPDATE] During the Christmas holidays i've asked Hetzner if the Storage Box could have problems with the stability of the connection. The answer was something like "the host has quite busy, but not. If you want we can switch the box to another host". Obviously i switched to check if...