Search found 14 matches

by rsutc
06 Jan 2016, 16:59
Forum: MailScanner
Topic: User cannot access mailwatch
Replies: 2
Views: 4778

Re: User cannot access mailwatch

ell, I guess I have to accept that, but I've been using it from another reseller account all the time I've had it without issue until now. BTW, I find the relevant files in /usr/local/cpanel/whostmgr/docroot/cgi/mailwatch but the line if ($_ENV['REMOTE_USER'] != "root") {exit("You do ...
by rsutc
06 Jan 2016, 14:34
Forum: MailScanner
Topic: User cannot access mailwatch
Replies: 2
Views: 4778

User cannot access mailwatch

I have been running the ConfigServer FE to MailScanner for years with very few issues. But now, when I click on Access Mailwatch, I get the error message You do not have permission to run this script If I log on a root, which I prefer not to, I can run it, but when I log on as a whm user that is sup...
by rsutc
05 Nov 2013, 16:38
Forum: MailScanner Front-End
Topic: Dealing with a mailbombing
Replies: 9
Views: 10037

Re: Dealing with a mailbombing

I actually banned some of those IP addresses in the firewall. I checked a few against the site you suggest and they were not blacklisted. I suspect they were faked. I wonder if I could write some rules for acls or for spamAssasson that would catch from = to and replyto contains google.com or gmail f...
by rsutc
30 Oct 2013, 22:43
Forum: MailScanner Front-End
Topic: Dealing with a mailbombing
Replies: 9
Views: 10037

Re: Dealing with a mailbombing

My scanner already does such checking. The ones that get in have passed those checks. I added about 20 IPs to my block list without noticaeable effect, as they switch to a new one ever few hundred messages or so. IP address is blocking correctly, but that strategy alone was not enough. It is possibl...
by rsutc
30 Oct 2013, 21:36
Forum: MailScanner Front-End
Topic: Dealing with a mailbombing
Replies: 9
Views: 10037

Re: Dealing with a mailbombing

Oh, and one more thing. Suppose I wanted to prevent bounces from going out to a specific domain, such as gmail.com. How and where would I write and place a rule for that?
Rick
by rsutc
30 Oct 2013, 21:22
Forum: MailScanner Front-End
Topic: Dealing with a mailbombing
Replies: 9
Views: 10037

Re: Dealing with a mailbombing

Ah, good. After watching a while that seemed to be what was happening. I gave the key catch phrases scores of 20 and set the delete threshold lower than that, so I got only the dark blue. However, I sense this is a temporary fix, as was enabling and requiring DKIM checking last week, for the bomber ...
by rsutc
30 Oct 2013, 16:40
Forum: MailScanner Front-End
Topic: Dealing with a mailbombing
Replies: 9
Views: 10037

Re: Dealing with a mailbombing

I looked up MCP, enabled it and put in some rules with a delete option for high scores. The offending mail is now being bluelisted. Does this mean it is rejected as :fail: would do without entering the system, or is it just bounced (the problem then continues)?
by rsutc
29 Oct 2013, 22:54
Forum: MailScanner
Topic: rejecting fake gmail
Replies: 2
Views: 5661

Re: rejecting fake gmail

First, I apologize for forgetting I had posted this message, and essentially re-posting on the problem today. I thought the problem had been solved by instituting mandatory DKIM checks, but that only slowed the volume from tens of thousands to a few hundred. We are still getting blocked by gmail. To...
by rsutc
29 Oct 2013, 22:38
Forum: MailScanner Front-End
Topic: Dealing with a mailbombing
Replies: 9
Views: 10037

Dealing with a mailbombing

This is a cross post. Also on cPanel forum. I use Mailscanner with the configerver front end. Accounts are set up with a default mail address of :fail: Yet someone with a lot of IP addresses is mailbombing an account on my box with thousands of emails addressed to nonexistent mailboxes on that accou...
by rsutc
09 Oct 2013, 23:36
Forum: MailScanner
Topic: rejecting fake gmail
Replies: 2
Views: 5661

rejecting fake gmail

An account on my machine is being bombed by thousands of messages to non-existent users with faked gmail "from" fields (and the faked gmail accounts are all different). These pile up in the undeliverable queue and so do gmail bounce messages. (Currently averaging 12K mesages per day). I ba...