Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Kerio Sends spam messages
  •  
gpetrom

Messages: 12
Karma: 0
Send a private message to this user
Hi

I have kerio version 6.4.2 installed it in windows 2003 that i had not problems. Recently i am seeing messages in queue without the from information. How can i stop kerio sending messages without sender information?
How can i find out from where these messages are sent
Let me tell that i have configured all security options
Users are from a specific address group(Local Lan)
Users must authenticate through smptp
Users previously authenticate through pop3
and i have also configured security options on smtp server.
Strange is that i have configured not to send an email if the sender domain is not found in dns and still tries to send it

Any ideas
This is a little urgent because my provider has blocked 25 port

Thanks

[Updated on: Mon, 01 October 2012 12:14]

  •  
Spacey

Messages: 156
Karma: -8
Send a private message to this user
Check the logfiles! There is written down who tries to send what.
Maybe some internal machine is infected with a virus or smth else....

[Updated on: Mon, 01 October 2012 12:46]

  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
You have to analyze such a message (the headers) and check if it has been sent internally. If so, maybe a user has a weak password and the account has been compromised to send Spam.

Or the messages come from an external mail server, but that would mean that you allow relaying, which you should switch off.


Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
gpetrom

Messages: 12
Karma: 0
Send a private message to this user
Hi

Thanks for the reply

I am not allowing relaying from outside the lan and i have checked the log files and i can not see from where the emails are sent. The from is empty.
I have also checked my router settings and smtp port is closed.
I also checked the nat translations in my router and the only one that opens 25 port is kerio mailserver.
Another strange thing is that i have changed the smtp port from 25 to 26 and i am steel seeing these messages in message queue

Any other ideas

[Updated on: Mon, 01 October 2012 13:20]

  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
In the Debug log, switch on "SMTP Server". You will then see who is sending the mail from which IP address.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
gpetrom

Messages: 12
Karma: 0
Send a private message to this user
Hi freakinvibe

Thanks that helped me to find the problem but i dont know how to solve it. I have a remote pop3 account that i have scheduled to receive the emails every 5 minutes. The problem is that when it receives an email without a valid recipient it tries to send it back to the sender.
How can i stop that

Thanks
  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
So you are not receiving mail directly, but your ISP is, right? You then pickup the messages via POP3.

If the recipient isn't valid, your ISP should already block the message on their end. If that is not possible, you can create a catch-all address and dump all unknown addresses in there. Not error message should go out to the sender then.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
gpetrom

Messages: 12
Karma: 0
Send a private message to this user
Yes i am not receiving emails directly. How can i make that rule
  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
Just create an Alias with *

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
gpetrom

Messages: 12
Karma: 0
Send a private message to this user
Thanks for the help freakinvibe that solved my problem.
Previous Topic: Runaway mailserver process
Next Topic: SMTP vs. SMTP Submission
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Aug 19 15:01:26 CEST 2017

Total time taken to generate the page: 0.00471 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.