jonson
1)
The problem when i call isp sometimes it tell me
problem in limit of email sending
and
2)
some times tell me problem in you ip in blacklist....i search i found my ip in pbl, i removed but still problem exist
So you have two problems & you need to troubleshoot them both, although the cause of one of those problems could result in the second problem happening.
You need to tell us your servers external IP so we can check.
You need to tell us your ISP name & smtp mail server address so we can check/test.
Have you ran a antivirus scan on all connected workstations & made sure none of them is infected (note that an infected workstation could be sending huge amounts of spam & virus infected email messages) ?
Have you physically disconnected each workstation (ie the LAN cable) & leaving it disconnected, then do the same on the next workstation & so on. Eventually all workstations will be disconnected. At some point you should (may) observe outward bound mail flow stops, if so you may have found the source of the problem.
Even if you have done the above & cleared all workstations as not being infected, it is possible that workstations can become infected again, & therefore start sending spam messages again.
So if your problems keep recurring (which you say they are), then you need to do a antivirus scan on your workstations again & run through the LAN cable disconnection procedure again.
If someone (either inadvertantly or deliberately) is sending large amounts of messages, then your mail sending limits at your ISP will quickly become exceeded, thus blocking you from sending any email at all.
One answer to that is to request your ISP to increase your sending limit.
It is also possible that your server has been hacked or compromised, & is sending large amounts of "rubbish" mail, which results in you being blacklisted.
Note that removing your server IP from a blacklist does not instantly mean your blacklisting is instantly non effective. It can take many hours to propagate throughout the Internet & for your ISPs rejection filters to no longer see your IP as being blacklisted. It is also possible & highly probable that your server IP is on other blacklists, & mail will still be blocked. You have to search for other lists & request removal of your IP.
Ultimately you MUST stop your server from being blacklisted repeatedly, as regularly having to remove your IP is NOT the best answer, you are effectively "chasing your own tail" getting nowhere.
Are you sending mail via your ISPs smtp server ?
Check this in server manager Email panel & if blank you should enter their details eg smtp.isp.com
Mail will always go via your ISP & then be sent to other mail servers, they will see the mail coming from a trusted IP (the IP of your ISP) rather than coming directly from your sme mail server IP (which is blacklisted). This will prevent mail being rejected by recipients mail servers, assuming your ISP is a good quality one & reputable.
What version of sme server are you running ?
Is it fully updated, ie have you ran these commands in the last few days ?
yum update
followed by
signal-event post-upgrade
signal-event reboot
Also do you have antivirus scanning enabled on the server (in server manager) ?
You can use software tools like
iptraf
to look at your server activity
Also you can look at log files like
qpsmtpd/current
and
qmail
Look in server manager View log files panel for easy to read format log files, these should show the source of email messages eg IP of workstation(s) or maybe the server itself as the sender.
Also please describe to us how your sme server is being used, is it a file server, how many connected workstations, is it a web server hosting web sites, do these websites have interactive pages where users can post or upload data, do these websites use CMS apps or similar (eg Joomla, Wordpress, Drupal or other PHP apps etc), how many other contribs are installed, are there any other special applications installed etc ?
Do you keep these apps/contribs updated ?
It is possible that a web application hosted on your server is compromised or hacked & is using your server as a mail relay to send spam etc, thus resulting in your IP being blacklisted & mail limits exceeded.
You can disable the web application(s) one by one by disabling the ibay Internet access & see if the mail flow suddenly stops. If so, then have the site updated to get rid of any security issues or reinstall or restore from a known good backup (before the hack occurred).
There is a lot more that can be said, but the above is enough for one reply, so go through what I have said, answer ALL questions asked, & check ALL things suggested. Something should be discovered that will give a clue. If not keep looking.
Report back here your answers & results. Please do not skip or miss questions or hurriedly supply us with insufficiently detailed information.
If you do not know how to do the above, then you need to hire a expert consultant.
41 Replies
13118 Views