Issue too many SPAM messages

[Kingsley]

Hello;

I am receiving too many spam messages, i have antispam enabled and i have tried blocking the emails yet they still pass through

 

[AYamshanov]

Could you provide email headers from the spam email?

 

[Kingsley]

how do i do that?

 

[AYamshanov]

As an example, with RoundCube: http://emailheaders.net/roundcube.html; with Outlook: Examine & Analyse Outlook Email Header – Step by Step Tutorial

 

[Kingsley]

Hello;

are sources from 3 spam mails

Return-Path: <[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from vps5863.com (unknown [49.88.153.81])
    by boma.sproutserver.com (Postfix) with SMTP id A8C715481E3C
    for <[email protected]>; Mon, 23 Apr 2018 19:24:19 +0100 (WAT)
Received: from zgwupxy (unknown [176.48.179.12])
    by vps5863.com (Postfix) with ESMTP id 90276664EF2
    for <[email protected]>; Mon, 23 Apr 2018 18:23:59 -0000
Date: Tue, 24 Apr 2018 02:23:59 +0800
From: "Ivan" <[email protected]>
To: "hello" <[email protected]>
Reply-To: <[email protected]>
Subject: =?GB2312?B?UmWjunR1cm5zdGlsZSBnYXRlIHN1cHBsaWVy?=
X-Mailer: Foxmail 5.0 [cn]
Mime-Version: 1.0
Content-Type: text/plain;
    charset="GB2312"
Content-Transfer-Encoding: base64
Content-Disposition: inline
Message-Id: <[email protected]>
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=

 

[Kingsley]

Return-Path: <[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from 3xxrp0msoofn.lsddes.com (unknown [116.7.99.172])
    by goodroad.sproutserver.com (Postfix) with SMTP id 267C6C1771
    for <[email protected]>; Thu, 26 Apr 2018 18:39:33 +0100 (WAT)
Received: from [127.0.0.1]; Fri, 27 Apr 2018 01:38:19 +0800
From: "2 in 1 QI fast charger" <[email protected]>
Reply-To: [email protected]
To: "hello" <[email protected]>
Subject: Hot selling! 2 in 1 QI wireless power charger for apple watch & iPhone
Message-ID: <[email protected]>
Date: Fri, 27 Apr 2018 01:38:19 +0800
X-Mailer: Foxmail 6, 10, 201, 20 [cn]
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=ooprr773_5472_236483797.616317"
X-Priority: 3

This is a multi-part message in MIME format.

------=ooprr773_5472_236483797.616317
Content-Type: multipart/alternative;
    boundary="----=iiij494_6298_272181096.013809"

------=iiij494_6298_272181096.013809
Content-Type: text/plain;
    charset="GB2312"
Content-Transfer-Encoding: base64

RGVhciANClNpciAmYW1wOyBNYWRhbSwgDQogDQpBcmUgDQp5b3UgaW50ZXJlc3RlZCBpbiBuZXcg
bW9kZWwgb2YgMiBpbiAxIFFJIHdpcmVsZXNzIGZhc3QgY2hhcmdlciBhcyANCmJlbG93Pw0KIA0K
V2VsY29tZSANCnlvdXIgaW5xdWlyeSB0b21fZ3JlYXRwb3dlckBzb2h1LmNvbSANCiANClRoYW5r
cyANCiZhbXA7IEJlc3QgcmVnYXJkcyANCkRlbm5pcyANCg0KDQogDQpSDQoyDQo2MQ==

------=iiij494_6298_272181096.013809
Content-Type: text/html;
    charset="GB2312"
Content-Transfer-Encoding: base64

 

[Kingsley]

Return-Path: <[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from ivxe.com (unknown [180.123.121.58])
    by boma.sproutserver.com (Postfix) with ESMTP id EB1C05480755
    for <[email protected]>; Wed, 25 Apr 2018 06:40:11 +0100 (WAT)
Received: from vps6084 ([127.0.0.1]) by localhost via TCP with ESMTPA; Wed, 25 Apr 2018 13:39:34 +0800
MIME-Version: 1.0
From: Jimmy <[email protected]>
Sender: Jimmy <[email protected]>
To: [email protected]
Reply-To: Jimmy <[email protected]>
Date: 25 Apr 2018 13:39:34 +0800
Subject: =?utf-8?B?UkU6IFRvcCAxMCB3aGVlbCBhY2Nlc3NvcmllcyBtYW51ZmFjdHVyZQ==?=
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
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==

 

[AYamshanov]

I didn't see any headers from antispam solutions like SpamAssassin/SPF/DKIM/DMARC/Greylisting. Are you sure that you enable them? Antispam Tools

As an example, you can see headers with an enabled antispam solution in a thread Issue - Mails always end up in spam

 

[Kingsley]

I didn't see any headers from antispam solutions like SpamAssassin/SPF/DKIM/DMARC/Greylisting. Are you sure that you enable them? Antispam Tools

As an example, you can see headers with an enabled antispam solution in a thread Issue - Mails always end up in spam

alright i have enabled them

 

[Brujo]

did you take into consider to use the Plesk extension of Magicspam, even the freemium Version is helpfull to avoid spam. Well if you think about to use magicspam take into consider for example to register for free at BarracudaCentral.org and add the Barracuda Reputation Block List (BRBL) in the settings section to the RBL (Realtime Blackhole Lists) of magicspam extension.

kind regards
Brujo

 

[Kingsley]

did you take into consider to use the Plesk extension of Magicspam, even the freemium Version is helpfull to avoid spam. Well if you think about to use magicspam take into consider for example to register for free at BarracudaCentral.org and add the Barracuda Reputation Block List (BRBL) in the settings section to the RBL (Realtime Blackhole Lists) of magicspam extension.

kind regards
Brujo

There is a FREE version of Magicspam?

 

[Brujo]

Yes, install the Magicspam extension from extension catalogue and you will get the free Version. If you need more functionality you have to buy the Lic/key

The following features are free:

• Custom policies for rejecting messages.
• Blocking of trojans and bots.
• Whitelisting and blacklisting of emails and IP addresses.
• Searchable logs.
• Live statistics.
• Automatic updates.

Additional features are paid, for example:

• Blocking of mail servers reported as spam sources.
• Blocking of mail servers using Confirmed Dynamic/DUL IP space DYNA REGEX.
• Regular updates of spam source and Confirmed Dynamic/DUL IP space data
• High speed IP Reputation source lookups (BMS)
• Known Sender Forgery detection

 

[Kingsley]

Yes, install the Magicspam extension from extension catalogue and you will get the free Version.

Alright Thanks