Blocking Ip address due to Spam

Hi,

I am using Xmail server on Linux. I have real Ip for my mail server but sometimes it gets blocked due to spreading spam from the server. Is there any configuration where i can monitor such an activity or block the sender from the server only.

Regards,
Ajay

It sounds like your server is an open relay. You need to lock it down a bit. have a look in the main forum on how to do this.

Thanx

BooT

After having a look at the forum i made following corrections:

Cleared smtpauth.tab
Cleared smtprelay.tab
Configured mail client for Authentication
In server.tab "EnableAuthSMTP-POP3" is set to "0"

Do in need to do anything else apart from the above configuration?

Thanks and Regards,
Ajay Rathod.

If you think your config is now corrected, you can go to:
http://www.antispam-ufrj.pads.ufrj.br/test-relay.html

and test your server by entering your IP address and check if it relays.

If your server does not accept spam then it is fine!

Thanx

BooT

Hi,

Thanx for the information. It shows that "All tests performed, no relays accepted by remote host"

it means my server doesnt acts as a open relay right!

Thanks once again.

Regards,
Ajay Rathod.

Yip!..Thats right!

Not open anymore.

You can also add :
"CheckMailerDomain" "1"
in server.tab to help a bit with spam.....

Hi

Thanks i followed as suggested by you. I edited server.tab i.e. "CheckMailerDomain" "1"
but may i know what will this do?

Regards,
Ajay Rathod.

It checks that the persone or server sending your server a mail actually exists.And if there are correct MX and DNS records for that domain.
If not, It will not accept the mail. Lots of spammers use bogus domains. This checks for it.

Dear Sir,

I have made all the changers to my server.tab as mentioned above but still sometimes my Ip address gets blocked. Here is my Server.tab file as follows:





#
# Example configuration file.
# Note : remember to use _REAL_ TABs and " to format this file
#
"RootDomain" "192.168.0.11"
"SmtpServerDomain" "192.168.0.11"
"POP3Domain" "192.168.0.11"
"HeloDomain" "synchronresearch.com"
"PostMaster" "postmaster@synchronresearch.com"
"ErrorsAdmin" "error@synchronresearch.com"
#"TempErrorsAdmin" "error@synchronresearch.com"
#"DefaultSMTPGateways" "192.168.1.2,192.168.1.15"
"RemoveSpoolErrors" "0"
#"NoSenderBounce" "1"
#"DisableEmitAuthUser" "1"
#"NotifyMsgLine***tra" "8"
#"NotifySendLogToSender" "0"
#"NotifyTryPattern" "1"
"MaxMTAOps" "16"
"ReceivedHdrType" "0"
"FetchHdrTags" "+X-Deliver-To,+Received,To,Cc"
#"SmtpMsgIPBanSpammers" "550 Denied due inclusion of your IP in our spam lists"
#"SmtpMsgIPBanSpamAddress" "550 Denied due inclusion of your email address in our spam lists"
#"SmtpMsgIPBanMaps" "550 Denied due inclusion of your IP in the following map"
#"CustomSMTPMessage" "Please open http://www.xmailserver.test/smtp_errors.html to get more information about this error"
#"MaxMessageSize" "30000"
"EnableAuthSMTP-POP3" "0"
#"Pop3SyncErrorAccount" "psync-errors@xmailserver.test"
#"AllowNullSender" "1"
#"AllowSmtpVRFY" "1"
#"AllowSmtpETRN" "1"
#"SMTP-MaxErrors" "4"
#"SmtpMinDiskSpace" "100000"
#"SmtpMinVirtMemSpace" "64000"
#"Pop3MinVirtMemSpace" "64000"
"CustMapsList" "sbl-xbl.spamhaus.org.:0,combined.njabl.org.:0,bl.spamcop.net.:0"
#"SMTP-RDNSCheck" "1"
"CheckMailerDomain" "1"
#"SmartDNSHost" "dns.home.bogus.net:tcp,192.168.1.1:udp"
#"DynDnsSetup" "www.dns4ever.com,80,/sys/u.cgi?d=MYDOMAIN&u=MYUSERNAME&p=MYPASSWORD&i=%s"
#"DynDnsSetup" "members.dyndns.org,80,/nic/dyndns?action=edit&started=1&hostname=YES&host_id=yourhost.ourdomain.ext&myip=%s&wildcard=OFF&mx=mail.exchanger.ext&backmx=NO,foouser,foopasswd"
#"SmtpConfig" "mail-auth"
#"SmtpConfig-192.168.0.1" "mail-auth"
"DefaultSmtpPerms" "MRVZ"



What else changer shall i make to server.tab to stop getting my IP address blocked.

Regards,
Ajay Rathod.

Set these to a real domain names, not to IP addresses:

"RootDomain" "192.168.0.11"
"SmtpServerDomain" "192.168.0.11"

The domain needst to exist, pointing to your server's IP. The IP itself needs to point back to the domain name (RDNS setup).

If a recipient server reads a non existing domain name it might blacklist your server. Read more here: http://xmailforum.homelinux.net/index.php?showtopic=1851