Search found 15 matches

by jestep
20 Jan 2022, 21:01
Forum: General Discussion (cmm)
Topic: Message contents empty
Replies: 0
Views: 2837

Message contents empty

I have no clue why this is happening, but some emails are basically empty in the mail manage interface. After the headers, there is just a "message not found in Quarantine" message and no other content, attachments, or actions are available. This only happens on seemingly random messages. ...
by jestep
01 Feb 2021, 19:54
Forum: MailScanner
Topic: False RBL Blocks
Replies: 1
Views: 2126

Re: False RBL Blocks

Edit, looks like it was related to a genius move by spamcop letting their domain expire.

https://forums.cpanel.net/threads/spamc ... ed.685309/
by jestep
01 Feb 2021, 19:21
Forum: MailScanner
Topic: False RBL Blocks
Replies: 1
Views: 2126

False RBL Blocks

Just started this morning, getting a ton of false positive RBL rejects. For example, one entry: 2021-02-01 13:11:58 H=shvf21.jpmchase.com [159.53.49.230]:53368 X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no F=<no-reply@alertsp.chase.com> rejected RCPT <REDACTED>: "JunkMail rejected - shvf21.jpm...
by jestep
07 Dec 2016, 21:27
Forum: General Discussion (csf)
Topic: CSF firewall blocking me all the time.
Replies: 2
Views: 2702

Re: CSF firewall blocking me all the time.

Just so you know a /16 IP block consists of over 65,000 ip addresses. It's an extraordinarily bad idea to whitelist such a large chunk of the IP space.

The range of IP's your whitelisting is: 58.253.0.0 - 58.253.255.254 which is 65,534 total IP's.
by jestep
07 Dec 2016, 21:12
Forum: General Discussion (csf)
Topic: cPanel 60.0.* and LOCALRELAY alerts
Replies: 2
Views: 3206

Re: cPanel 60.0.* and LOCALRELAY alerts

So we put in a ticket and in our case the localrelay alerts were related to cron script. Specifically the cron scrips weren't sending emails but weren't fully suppressing output either. Basically had: /path/to/script > /dev/null & Apparently in pre-CentOS 7 these are causing CSF LOCALRELAY alert...
by jestep
06 Dec 2016, 14:48
Forum: General Discussion (csf)
Topic: cPanel 60.0.* and LOCALRELAY alerts
Replies: 2
Views: 3206

Re: cPanel 60.0.* and LOCALRELAY alerts

Same thing on our cpanel servers, running centos 6.8. The scripts being reported in my situation do not use localrelay, Many of them don't even send mail at all, but they all do use imap functions to check mailboxes and all are run silently using cron. Are the ones you're seeing run from cron or are...
by jestep
21 Jun 2016, 21:52
Forum: General Discussion (csf)
Topic: CSF Alert, How to Change Hostname in Email and Sender Address
Replies: 5
Views: 6093

Re: CSF Alert, How to Change Hostname in Email and Sender Address

Ok, I think I got it. Even though the hostname was showing correctly using the: hostname command, I went ahead and issues a hostnamectl set-hostname mysubdomain.mydomain.com command. After restarting LFD, it seems to be working now.
by jestep
21 Jun 2016, 21:40
Forum: General Discussion (csf)
Topic: CSF Alert, How to Change Hostname in Email and Sender Address
Replies: 5
Views: 6093

Re: CSF Alert, How to Change Hostname in Email and Sender Address

Also, if I use the command: hostname it shows the correct hostname for the server and not localhost.localdomain.
by jestep
21 Jun 2016, 21:22
Forum: General Discussion (csf)
Topic: CSF Alert, How to Change Hostname in Email and Sender Address
Replies: 5
Views: 6093

Re: CSF Alert, How to Change Hostname in Email and Sender Address

To add both of these are using sendmail. When I issue: sendmail -d0.1 -bv root I get: Version 8.14.7 Compiled with: DNSMAP HESIOD HES_GETMAILHOST LDAPMAP LOG MAP_REGEX MATCHGECOS MILTER MIME7TO8 MIME8TO7 NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS PIPELINING SASLv2 SCANF SOCKETMAP STARTTLS TCPWRAP...
by jestep
21 Jun 2016, 20:26
Forum: General Discussion (csf)
Topic: CSF Alert, How to Change Hostname in Email and Sender Address
Replies: 5
Views: 6093

CSF Alert, How to Change Hostname in Email and Sender Address

This is happening to me on 2 non-cpanel servers that we're running. Basically the title of the email reads something like: lfd on localhost.localdomain How do we get localhost.localdomain to be the actual hostname of the server? We have our hostname attached to each IP in /etc/hosts. On 1 server, th...