Qmail failing to restart !

When trying to restart Qmail are you getting the failure message ? Check for the mailogs to see if you can spot something. If you are on a plesk server, you can find the logs at /usr/local/psa/var/log/maillog Do you find an error like : ================== Date host...

Exim – Dropping SMTP connection at HELO/EHLO !

We are observing a brute-force attack towards SMTP connections from different IP addresses with the same machine name – “ylmf-pc“ It could be many malware affected machines involved or an extended IP spoofing. If you have CSF configured properly, the IPs would be...

Tracking down spamming in Plesk – 2

This post will help you to track down spamming from a Plesk server, if its employed using PHP scripts in any of the domains. – Use this one to view the folders which have mail PHP scripts enabled and running. # vi /var/qmail/bin/sendmail-wrapper #!/bin/sh (echo...

Tracking down spamming in Plesk – 1

Finding the source of spamming in a server provisioned with Plesk is a tough job. Some of the useful commands which might help you are given down. Find the number of mails hung in the queue : # /var/qmail/bin/qmail-qstat To get an idea about the the message headers of...

Clearing huge eximstats db !

The eximstats database might tend to grow in size if there is high amount of mailing from your server. Check if the following value from WHM is set to a higher interval : Home »Server Configuration »Tweak Settings >> “The interval, in days, to retain Exim...