• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Issue Outgoing mail from non-local user

tkalfaoglu

tkalfaoglu

Silver Pleskian
Regular postfix/spamassassin site here.. I am seeing in /var/log/maillog file, mail sent from a particular user, [email protected] where domain.com is hosted by us.. but they have no marinuser listed - the mailbox does not exist. the logs are full of mail like this:
Nov 27 03:21:57 ocean postfix/qmgr[23715]: 628A311E104A: from=<[email protected]>, size=1311, nrcpt=1 (queue active)

I blocked the suspected IP, created [email protected], set its outgoing limit to 1, but I am curious how they were able to send such emails, and why didn't Plesk or Postfix complain about outgoing mail from a non-existing local user?

Thanks
-t
 
The part left of a domain is freely configurable in outgoing mails. When a script sends emails from a website, it can set the "from" field to anything, because a login is not needed.
 
You must log in or register to reply here.

Similar threads

Erwin Fiten
Question Spam sent from my server by other hosts ???
Replies
4
Views
518
Bitpalast
Bitpalast
W
Issue Mail forwarded on the server in the target mailbox is delivered to the SPAM folder
Replies
0
Views
465
W4ru
W
EnriqueR
Issue Postfix malfunctioning
Replies
2
Views
698
mow
M
EnriqueR
Question Incoming mail is stored in Junk folder
Replies
6
Views
898
EnriqueR
EnriqueR
andreios
Question Bounced mail from Clamav
Replies
2
Views
880
andreios
andreios
Back
Top