Delivery queue full - spam attack. How to prevent?

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
kdiamond
Normal user
Normal user
Posts: 94
Joined: 2013-03-20 10:51

Delivery queue full - spam attack. How to prevent?

Post by kdiamond » 2018-03-23 13:34

Dear Hmail users.

Probably a basic question for you experts here:

Long story short. There was attack someone figured out user password and start to send out unsolicited email. Now my IP is blacklisted by Baracuda, Gmail and few other blacklist services and email providers. It will take few days to be unlisted, but until then all other users on sam IP will not be able to send out messages and that is really not good. :)

So the question goes. How to fight against it if/when it happens again? How to limit the outgoing mail or ban the user if he try to send more than X number of messages per minute or such. What is the good practice not to hit the blacklist again.

Thank you
Br,
Dali

kdiamond
Normal user
Normal user
Posts: 94
Joined: 2013-03-20 10:51

Re: Delivery queue full - spam attack. How to prevent?

Post by kdiamond » 2018-03-23 14:47

I have just found out this script. It does work great!

http://www.hmailserver.com/forum/viewto ... 20&t=13824

Br,
Dali

User avatar
jimimaseye
Moderator
Moderator
Posts: 8912
Joined: 2011-09-08 17:48

Re: Delivery queue full - spam attack. How to prevent?

Post by jimimaseye » 2018-03-23 15:36

You should you this version of the same script: http://www.hmailserver.com/forum/viewto ... 20&t=28269
5.7 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

kdiamond
Normal user
Normal user
Posts: 94
Joined: 2013-03-20 10:51

Re: Delivery queue full - spam attack. How to prevent?

Post by kdiamond » 2018-03-23 16:16

Thank you so much jimimaseye.
10 The hmailserver_events.log file needs to be cycled since there is no hmail inbuilt procedure for this. To do this setup a windows task scheduler job to run CycleEventLog.vbs (rename CycleEventLog.txt to CycleEventLog.vbs ) on a daily, weekly or monthly cycle according to which you prefer. (daily works best IMO)
Where do I get CycleEventLog.txt or CycleEventLog.vbs?

Another question
outboundstore.txt will store number of emails sent by the users and domains. Is this for the script functionality or just a log? Do I need to clear/delete it daily using task scheduler in order for the script to function on daily base?

Thank you for helping!

Br,
Dali

User avatar
jimimaseye
Moderator
Moderator
Posts: 8912
Joined: 2011-09-08 17:48

Re: Delivery queue full - spam attack. How to prevent?

Post by jimimaseye » 2018-03-23 16:41

Not a clue!! I didnt write it and i cant seem to find any evidence of it. (Perhaps it was forgotten).

Post the question on the end of that thread (quoting Soren, as you did above) and maybe he can answer.
5.7 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

kdiamond
Normal user
Normal user
Posts: 94
Joined: 2013-03-20 10:51

Re: Delivery queue full - spam attack. How to prevent?

Post by kdiamond » 2018-03-23 17:04

Did that.

if you're using the script, do you by any chance know my second question... outboundstore.txt will store number of emails sent by the users and domains. Is this for the script functionality or just a log? Do I need to clear/delete it daily using task scheduler in order for the script to function on daily base?

Thank you
Br,
Dali

User avatar
jimimaseye
Moderator
Moderator
Posts: 8912
Joined: 2011-09-08 17:48

Re: Delivery queue full - spam attack. How to prevent?

Post by jimimaseye » 2018-03-23 17:18

I dont use the script - I would need to read the instructions that are in the thread links (1st post) like anyone else.
5.7 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

Post Reply