Issue Wordpress messages blocked!

elitechsavvy

New Pleskian
Hello folks,

Where do you check why Plesk server is not sending messages besides ports are opened on firewall?

Thank you for your insights.

Eli
 
Feb 3 21:47:44 localhost postfix-local[17360]: postfix-local: from=MAILER-DAEMON, to=[email protected], dirname=/var/qmail/mailnames
Feb 3 21:47:44 localhost postfix-local[17360]: cannot chdir to mailname dir eacevedo: No such file or directory
Feb 3 21:47:44 localhost postfix-local[17360]: Unknown user: [email protected]
Feb 3 21:47:44 localhost postfix/pipe[17358]: 1525267CE: to=<[email protected]>, relay=plesk_virtual, delay=0.05, delays=0/0.01/0/0.03, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Feb 3 21:47:44 localhost postfix/qmgr[128801]: 1525267CE: removed
Feb 3 21:51:30 localhost dovecot_authdb_plesk[46661]: No such user '[email protected]' in mail authorization database
Feb 3 21:51:32 localhost dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=94.102.57.241, lip=108.175.15.63, session=<k1+F9LedztteZjnx>
Feb 3 22:01:37 localhost postfix/qmgr[128801]: B3E9967C5: from=<[email protected]>, size=20031, nrcpt=1 (queue active)
Feb 3 22:01:37 localhost postfix/qmgr[128801]: 46CA4B6785: from=<[email protected]>, size=20933, nrcpt=1 (queue active)
Feb 3 22:01:37 localhost postfix/qmgr[128801]: 5666967C4: from=<[email protected]>, size=637, nrcpt=1 (queue active)
Feb 3 22:01:37 localhost postfix/smtp[106680]: B3E9967C5: host smtp.secureserver.net[68.178.213.37] refused to talk to me: 554 p3plibsmtp02-02.prod.phx3.secureserver.net CMGW IB105. Connection refused. 108.175.15.63 is listed on the Exploits Block List (XBL) <http://www.spamhaus.org/query/ip/108.175.15.63> Please visit XBL - Exploit and Botnet Filter - The Spamhaus Project for more information.
Feb 3 22:01:37 localhost postfix/smtp[106681]: 46CA4B6785: host smtp.secureserver.net[68.178.213.203] refused to talk to me: 554 p3plibsmtp03-08.prod.phx3.secureserver.net CMGW IB105. Connection refused. 108.175.15.63 is listed on the Exploits Block List (XBL) <http://www.spamhaus.org/query/ip/108.175.15.63> Please visit XBL - Exploit and Botnet Filter - The Spamhaus Project for more information.
Feb 3 22:01:37 localhost postfix/smtp[106682]: 5666967C4: host smtp.secureserver.net[68.178.213.37] refused to talk to me: 554 p3plibsmtp02-10.prod.phx3.secureserver.net CMGW IB105. Connection refused. 108.175.15.63 is listed on the Exploits Block List (XBL) <http://www.spamhaus.org/query/ip/108.175.15.63> Please visit XBL - Exploit and Botnet Filter - The Spamhaus Project for more information.
 
As you can see from log your server IP 108.175.15.63 is blacklisted.
You have to contact your Service Provider, Spamhouse, etc.
 
Yes, I have already submit the removal from CBL.

108.175.15.63 is listed in the XBL, because it appears in:
The odd part is that in some other WordPress plugins emails are sent to the user but not to Administrators.
 
Here is the updated log:

Feb 3 22:47:20 localhost journal: plesk sendmail[98433]: SKIP during call 'check-quota' handler
Feb 3 22:47:20 localhost postfix/pickup[67391]: 82CEC67C2: uid=10000 from=<[email protected]>
Feb 3 22:47:20 localhost postfix/cleanup[98164]: 82CEC67C2: message-id=<[email protected]>
Feb 3 22:47:20 localhost postfix/qmgr[128801]: 82CEC67C2: from=<[email protected]>, size=826, nrcpt=1 (queue active)
Feb 3 22:47:20 localhost postfix/local[98168]: 82CEC67C2: to=<[email protected]>, relay=local, delay=0.03, delays=0.02/0/0/0, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 3 22:47:20 localhost postfix/qmgr[128801]: 82CEC67C2: removed
Feb 3 22:47:20 localhost check-quota[98441]: Starting the check-quota filter...
Feb 3 22:47:20 localhost journal: plesk sendmail[98440]: handlers_stderr: SKIP
Feb 3 22:47:20 localhost journal: plesk sendmail[98440]: SKIP during call 'check-quota' handler
Feb 3 22:47:20 localhost postfix/pickup[67391]: 986F567C2: uid=10000 from=<[email protected]>
Feb 3 22:47:20 localhost postfix/cleanup[98164]: 986F567C2: message-id=<[email protected]>
Feb 3 22:47:20 localhost postfix/qmgr[128801]: 986F567C2: from=<[email protected]>, size=19981, nrcpt=1 (queue active)
Feb 3 22:47:20 localhost check-quota[98448]: Starting the check-quota filter...
Feb 3 22:47:20 localhost journal: plesk sendmail[98447]: handlers_stderr: SKIP
Feb 3 22:47:20 localhost journal: plesk sendmail[98447]: SKIP during call 'check-quota' handler
Feb 3 22:47:20 localhost postfix-local[98449]: postfix-local: from=[email protected], to=[email protected], dirname=/var/qmail/mailnames
Feb 3 22:47:20 localhost postfix/pickup[67391]: A9A344D4C3: uid=10000 from=<[email protected]>
Feb 3 22:47:20 localhost postfix/cleanup[98164]: A9A344D4C3: message-id=<[email protected]>
Feb 3 22:47:20 localhost postfix-local[98449]: cannot chdir to mailname dir eli: No such file or directory
Feb 3 22:47:20 localhost postfix-local[98449]: Unknown user: [email protected]
Feb 3 22:47:20 localhost postfix/qmgr[128801]: A9A344D4C3: from=<[email protected]>, size=19973, nrcpt=1 (queue active)
Feb 3 22:47:20 localhost postfix/trivial-rewrite[98165]: warning: do not list domain asesoriasit.com in BOTH mydestination and virtual_mailbox_domains
Feb 3 22:47:20 localhost postfix/pipe[98171]: 986F567C2: to=<[email protected]>, relay=plesk_virtual, delay=0.1, delays=0.03/0.01/0/0.06, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Feb 3 22:47:20 localhost postfix/qmgr[128801]: 986F567C2: removed
Feb 3 22:47:20 localhost postfix/local[98168]: A9A344D4C3: to=<[email protected]>, relay=local, delay=0.04, delays=0.03/0/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 3 22:47:20 localhost postfix/qmgr[128801]: A9A344D4C3: removed
 
If it is repeating CBL blacklisting, read this issue that may also apply to you:
 
I have had the second option and cbl

108.175.15.63 is not listed in the SBL
108.175.15.63 is not listed in the PBL
108.175.15.63 is not listed in the XBL


What other setting am I missing??
 
I have contacted my provider, this is a cloud server.

I have checked open ports and all seems good, even with the plesk firewall:


PORT STATE SERVICE
22/tcp open ssh
25/tcp open smtp
80/tcp open http
110/tcp open pop3
443/tcp open https
465/tcp open smtps
587/tcp open submission
993/tcp open imaps
995/tcp open pop3s
8443/tcp open https-altAIT Consulting - asesoriasit.com.png
 
I have spoke with my provider and we have made some test:
# cat /etc/resolv.conf
; generated by /usr/sbin/dhclient-script
nameserver 2001:8d8:fe:53:72ec::1
nameserver 2001:8d8:fe:53:72ec::2

Added in google resolvers at the top.

# cat /etc/resolv.conf
; generated by /usr/sbin/dhclient-script
nameserver 8.8.8.8
nameserver 8.8.4.4
nameserver 2001:8d8:fe:53:72ec::1
nameserver 2001:8d8:fe:53:72ec::2

Server seems fine, pointing to something on Plesk.
 
I have had the second option and cbl
You need to read further down in that thread I sent you. You do not want the second option. You want the first option that says "Send from domain IP addresses." only. Then you can apply to have your listing fixed at the CBL. CBL lists anyone who has more than one domain announced by their SMTP server on one IP address.
 
Back
Top