CSF Firewall RELAY Alert / RELAY, Remote IP
Blacklisted SMTP IP addresses
:
csf RELAY Alert / RELAY, Remote IP
bounce
Undelivered Mail Returned to Sender
<> Trackdelivery
ip
:I am getting hundreds of these errors in my inbox everyday.
Time: Thu Feb 19 23:09:28 2015 -0500
Type: RELAY, Remote IP - 111.69.139.68 (US/United States/mx55.h.outbound.createsend.com)
Count: 101 emails relayed
Blocked: No
Sample of the first 10 emails:
2015-02-19 23:02:56 1YOenn-0002bF-RJ <= [email protected] H=mx55.h.outbound.createsend.com [204.75.142.55]:35593 P=esmtp S=50023 id=[email protected] T="Just Car News: Reel Deal Winners, Latest from Mighty Car Mods, ADGP and more" for [email protected]
do anyone knows what is it?
This is not outgoing spam being relayed through the VPS. This is incoming spam being received by the VPS which caused LFD to trigger a RELAY alert due to the remote IP address '111.69.139.68' sending to over 100 recipients within an hour's time.
bulk emails
block ip + server name
csf cphulk
+
You can use the Exim Blacklist to refuse all SMTP traffic from an IP
WHM >> Service Configuration >> Exim Configuration Manager
Basic Editor -Access Lists
Blacklisted SMTP IP addresses
(IP addresses from which SMTP connections are dropped unconditionally)
ip
WHM/cPanel SMTP Relay / Open mail relay
:
https://www.knownhost.com/forums/thr...d-states.3349/
https://forum.configserver.com/viewtopic.php?t=1493
https://forum.configserver.com/viewtopic.php?t=8236
https://forums.cpanel.net/threads/di...alerts.612903/
https://forums.cpanel.net/threads/di...alerts.612903/