Outbound senders - Not related to mail server. BUILD -7242

Problem reported by CTL - 11/14/2019 at 9:16 PM

Submitted

Today I noticed spool dashboard indicating outbound senders not related to our hosted domains. Is there anything we have to configure to restrict outgoing mail apart from our own domain. For example we have domain

domain1.com

domain2.com

domain3.com

domain4.com

Remote spam mail hit our server all above 4 domains and subsequently deleted from above 30 spam weight. However the log indicate, the remote mail get notice back to remote server and confirm deliver report with same reported domain name.

outgoing.txt

I have attached log file and changed my own domain as domain1 domain2 domain3 & domain4

Please review log and let me know your solution.

Is there any concept related to read receipt the above scenario because origin mail and delivery mail same

Suspect remote mail delivery line

Delivery for jim@connectpartner.info to jim@connectpartner.info has completed

Delivery for service@paypal.com to service@paypal.com has completed (Delivered)

Thanks

Binesh

4 Replies

Reply to Thread

Sébastien Riccio Replied

11/14/2019 at 10:30 PM

Hmm, not 100% sure but could it be "delivery success" confirmation requested from the sender that are returned by SmarterMail?

I never tested it but having a mail being deleted by the spam filter is maybe still considered has being delivered successfully to the mailbox from a SMTP point of view.

The receiving mailbox re-routing it to trash is probably out of SMTP scope.

Your log is an extract of the delivery log, can you check the SMTP log for the incoming mail, if there is any NOTIFY=success notion on the RCPT TO lines ?

Sébastien Riccio

System & Network Admin

https://swisscenter.com

CTL Replied

11/15/2019 at 12:16 AM

Sébastien Riccio

SMTP log do not indicate NOTIFY=success notion on the RCPT To lines.

In the spool dashboard never seen before build 7242 for any third party email outbound sender list. I think outbound means any email inside server to outside third party clients right ? How come dashboard indicate outside domain outbound mail list

Delivery for service@paypal.com to service@paypal.com has completed (Delivered)

Any suggestion

Thanks

CTL Replied

12/6/2019 at 3:28 AM

Hello All

I have found the problem outbound mail by pass authentication via IP white list IP , latest build automatically fetch authentication by pass white list IP , its cause huge security vulnerability , Smatermail Support team should not develop or open without customer knowledge by pass authentication.

In my server huge list of IPs for white listed due to proper mail delivery. The Ips accumulate over 14 years smartermail usage for mail service.

Any one using IPs white list then careful , should use only SMTP / IMAP purpose

FYI - Spool Dashboard helped me outbound service

Thanks

Binesh

Employee Replied

12/9/2019 at 10:34 AM

Employee Post

Hello Binesh,

The whitelisting functionality currently in SmarterMail is working as designed here. We strongly recommend that you do not whitelist any IPs that are not your own as whitelisting is meant to allow certain IPs to bypass certain security checks. If I am misunderstanding what is going on please let me know, and I'd be happy to try and see how I can help. Have a wonderful day.

Back to Community Threads

Reply to Thread

Enter the verification text