ISPconfig3 System Log Warning

Discussion in 'ISPConfig 3 Priority Support' started by danhansen@denmark, Mar 31, 2014.

  1. danhansen@denmark

    danhansen@denmark Member HowtoForge Supporter

    Hi,


    Ubuntu 12.04.4 - ISPconfig3 (more details in signature)


    Please help me understand this:
    "...To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited.."

    Content of system log:
    Code:
    Mar 31 21:51:01 catalina CRON[21724]: (root) CMD (/usr/local/ispconfig/server/server.sh > /dev/null 2>> /var/log/ispconfig/cron.log)
    Mar 31 21:51:43 catalina postfix/qmgr[2049]: D9D6E2020CA: from=<[email protected]>, size=3081, nrcpt=1 (queue active)
    Mar 31 21:51:45 catalina postfix/smtp[21731]: D9D6E2020CA: host gmail-smtp-in.l.google.com[74.125.143.27] said: 421-4.7.0 [188.179.11.234 15] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit http://www.google.com/mail/help/bulk_mail. 421 4.7.0 html to review our Bulk Email Senders Guidelines. c1si9394098lbp.233 - gsmtp (in reply to end of DATA command)
    Mar 31 21:51:45 catalina postfix/smtp[21731]: connect to gmail-smtp-in.l.google.com[2a00:1450:4010:c04::1b]:25: Network is unreachable
    Mar 31 21:51:46 catalina postfix/smtp[21731]: D9D6E2020CA: to=<[email protected]>, relay=alt1.gmail-smtp-in.l.google.com[173.194.64.27]:25, delay=180957, delays=180954/0.04/2/0.99, dsn=4.7.0, status=deferred (host alt1.gmail-smtp-in.l.google.com[173.194.64.27] said: 421-4.7.0 [188.179.11.234 15] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit http://www.google.com/mail/help/bulk_mail. 421 4.7.0 html to review our Bulk Email Senders Guidelines. t4si13014822oej.51 - gsmtp (in reply to end of DATA command))
    
    Content of Mail Queue:
    Code:
    Data from: 2014-04-01 01:05
    -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
    36AF8202118 3081 Sat Mar 29 18:48:33 [email protected]
    (host alt1.gmail-smtp-in.l.google.com[173.194.64.27] said: 421-4.7.0 [188.179.11.234 15] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit http://www.google.com/mail/help/bulk_mail. 421 4.7.0 html to review our Bulk Email Senders Guidelines. do5si13234781oeb.8 - gsmtp (in reply to end of DATA command))
    [email protected]
    
    68A5E20216E 3081 Sat Mar 29 19:10:54 [email protected]
    (host alt1.gmail-smtp-in.l.google.com[173.194.64.27] said: 421-4.7.0 [188.179.11.234 15] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit http://www.google.com/mail/help/bulk_mail. 421 4.7.0 html to review our Bulk Email Senders Guidelines. pu6si13235921oeb.106 - gsmtp (in reply to end of DATA command))
    [email protected]
    
    2B2D7202182 3091 Sun Mar 30 16:13:22 [email protected]
    (host alt1.gmail-smtp-in.l.google.com[173.194.64.27] said: 421-4.7.0 [188.179.11.234 15] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit http://www.google.com/mail/help/bulk_mail. 421 4.7.0 html to review our Bulk Email Senders Guidelines. do5si13256305oeb.134 - gsmtp (in reply to end of DATA command))
    [email protected]
    
    D9D6E2020CA 3081 Sat Mar 29 18:35:49 [email protected]
    (host alt1.gmail-smtp-in.l.google.com[173.194.64.27] said: 421-4.7.0 [188.179.11.234 15] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit http://www.google.com/mail/help/bulk_mail. 421 4.7.0 html to review our Bulk Email Senders Guidelines. ch9si13185748obc.133 - gsmtp (in reply to end of DATA command))
    [email protected]
    
    -- 14 Kbytes in 4 Requests.
    
    Thanks in advance ;)
    .
     
    Last edited: Apr 1, 2014
  2. srijan

    srijan New Member HowtoForge Supporter

    Hi

    this means that you reaches the greylist of the Gmail's mail server, so you are considered as a spam for gmail.

    Br//
    Srijan
     
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    The website "web1" on your server seems to send out spam. You can see the website ID in the sender address.

    take a look at the conatnt of the spam email with:

    postcat /var/spool/postfix/deferred/6/68A5E20216E

    the mail header that oyu see there should contain the name of the spam sending php script, when the site is written in php.
     
  4. danhansen@denmark

    danhansen@denmark Member HowtoForge Supporter

    SPAM or tests ???

    Hi,

    Can this be due to some tests we made? 5-10 mails, some the same and some slightly different??

    web1 is my own shop and I'm a little lost here. I setup "normal" email security at the mail accounts used for this site.

    I received some spam during the last 3 months. 3-4 every month. Just transferred it to JUNK and thought that was that.

    The problem is, that some of our mail accounts for the shop appears on the site. I know it's not very smart, but some times we need to do it this way.

    Can one of these issues be the source of the problem?

    .
     

Share This Page