Posts by Puntonetsvb

    Fue lo primero que pensé, y la deshabilite hace tiempo, pero lo que me llama la atención es que sigue pasando, y limpio la web y me aparecen archivos php a cientos primero un comprimido y se el resultado de la descompresión

    Tengo un servidor con la ultima version

    y los plugins

    ClamAV

    Provides ClamAV anti-virus through MILTER.

    Versión 1.3.0 (Build 2017070300)
    Por Laurent Declercq, Rene Schuster y Sascha Bay | Visitar el sito de plug-ins
    Activado

    Mailgraph

    Plugin that provides statistical graphics for SMTP traffic (Postfix and Sendmail).

    Versión 1.1.1 (Build N/D)
    Por Sascha Bay | Visitar el sito de plug-ins
    Activado

    OpenDKIM

    Provides DomainKeys Identified Mail (DKIM) service through MILTER.

    Versión 2.0.0 (Build 2017090800)
    Por Laurent Declercq, Sascha Bay y Rene Schuster | Visitar el sito de plug-ins
    Activado

    PolicydSPF

    Provides Simple Postfix policy server for RFC 4408/7208 SPF checking.

    Versión 1.2.0 (Build 2017070300)
    Por Laurent Declercq y Ninos Ego | Visitar el sito de plug-ins
    Activado

    Postgrey

    Provides a greylisting implementation for Postfix using Postgrey policy server.

    Versión 1.3.0 (Build 2018032000)
    Por Laurent Declercq | Visitar el sito de plug-ins
    Activado

    SpamAssassin

    Provides SpamAssassin spam filter through MILTER.

    Versión 2.0.1 (Build 2017070300)
    Por Laurent Declercq, Rene Schuster y Sascha Bay | Visitar el sito de plug-ins
    Activado

    solo tiene un dominio, el cual corre un joomla

    cada poco me dice ovh que envio spam, es cada pocas horas, el log me dice esto:


    Nov 19 06:25:37 vps602514 postfix/smtpd[30329]: connect from unknown[162.247.99.113]

    Nov 19 06:25:40 vps602514 postfix/smtpd[30329]: warning: unknown[162.247.99.113]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

    Nov 19 06:25:40 vps602514 postfix/smtpd[30329]: disconnect from unknown[162.247.99.113] helo=1 auth=0/1 quit=1 commands=2/3

    Nov 19 06:27:24 vps602514 postfix/smtpd[30609]: connect from unknown[24.51.95.89]

    Nov 19 06:27:27 vps602514 postfix/smtpd[30609]: warning: unknown[24.51.95.89]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

    Nov 19 06:27:27 vps602514 postfix/smtpd[30609]: disconnect from unknown[24.51.95.89] helo=1 auth=0/1 quit=1 commands=2/3

    Nov 19 06:28:14 vps602514 postfix/smtpd[30609]: warning: hostname no-reverse-dns-configured.com does not resolve to address 80.82.70.189

    Nov 19 06:28:14 vps602514 postfix/smtpd[30609]: connect from unknown[80.82.70.189]

    Nov 19 06:28:16 vps602514 postfix/smtpd[30609]: warning: unknown[80.82.70.189]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

    Nov 19 06:28:16 vps602514 postfix/smtpd[30609]: disconnect from unknown[80.82.70.189] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4

    Nov 19 06:29:02 vps602514 postfix/smtpd[30609]: connect from unknown[184.71.152.86]

    Nov 19 06:29:05 vps602514 postfix/smtpd[30609]: warning: unknown[184.71.152.86]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

    Nov 19 06:29:05 vps602514 postfix/smtpd[30609]: disconnect from unknown[184.71.152.86] helo=1 auth=0/1 quit=1 commands=2/3

    Nov 19 06:29:05 vps602514 postfix/smtpd[30614]: connect from unknown[45.125.65.123]

    Nov 19 06:29:07 vps602514 postfix/smtpd[30614]: warning: unknown[45.125.65.123]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

    Nov 19 06:29:07 vps602514 postfix/smtpd[30614]: lost connection after AUTH from unknown[45.125.65.123]

    Nov 19 06:29:07 vps602514 postfix/smtpd[30614]: disconnect from unknown[45.125.65.123] ehlo=1 auth=0/1 commands=1/2



    me dicen que si backscatter que si dovecot, llevo un mes intentando solucionarlo, lo he cambiado a tres server diferentes y se repite siempre, he probado con fail2ban, pero ya no se por donde tirar.



    Espero que alguien pueda ayudarme.

    Un saludo

    Tengo un dominio que recibe correos normalmente, pero hay ciertas direcciones que filtra sin saber porque, y quería saber si se pueden preautorizar ciertas direcciones para poder recibir los correos de ellas.

    Cuando escapadarural manda el correo a un cliente, este no lo recibe. Esto indica el log:


    Oct 30 12:49:44 xeon postfix/smtpd[27136]: connect from escapadarural.com[176.31.247.181]

    Oct 30 12:49:44 xeon postfix/policy-spf[28436]: Policy action=PREPEND Received-SPF: pass (escapadarural.com: 176.31.247.181 is authorized to use 'er-admin=i$

    Oct 30 12:49:44 xeon postfix/policyd-weight[721]: decided action=PREPEND X-policyd-weight: using cached result; rate: -6.1; <client=escapadarural.com[176.31$

    Oct 30 12:49:44 xeon postfix/smtpd[27136]: EC67B2384FED: client=escapadarural.com[176.31.247.181]

    Tengo un server 1.5 con phpswitcher y he activado en todas las versiones de PHP el

    mail.add_x_header = On

    Y

    mail.log = /var/log/phpmail.log

    Tiene 777 el archivo pero siempre está vacio


    He modificado todos los PHP.ini que están dentro de la carpeta opt/pphpswitcher pero sigue sin ir

    ;(;(

    Al generar un cerficiado con el plugin letsencrypt me tira este error, pero luego la web se ve como certificada.


    Can't locate Convert/ASN1.pm in @INC (you may need to install the Convert::ASN1 module) (@INC contains: /var/www/imscp/engine/PerlLib /var/www/imscp/engine/PerlVendor /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.20.2 /usr/local/share/perl/5.20.2 /usr/lib/x86_64-linux-gnu/perl5/5.20 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.20 /usr/share/perl/5.20 /usr/local/lib/site_perl .)
    at /var/www/imscp/gui/plugins/LetsEncrypt/backend/LetsEncrypt.pm line 1171.
    Plugin::LetsEncrypt::_getConvertASN1Object(Plugin::LetsEncrypt=HASH(0x407a860)) called at /var/www/imscp/gui/plugins/LetsEncrypt/backend/LetsEncrypt.pm line 1205
    Plugin::LetsEncrypt::_decodePemCert(Plugin::LetsEncrypt=HASH(0x407a860), "/etc/letsencrypt/live/elterrero.es/cert.pem") called at /var/www/imscp/gui/plugins/LetsEncrypt/backend/LetsEncrypt.pm line 953
    Plugin::LetsEncrypt::_getCertRequiredAction(Plugin::LetsEncrypt=HASH(0x407a860), "/etc/letsencrypt/live/elterrero.es/cert.pem", "elterrero.es", "www.elterrero.es") called at /var/www/imscp/gui/plugins/LetsEncrypt/backend/LetsEncrypt.pm line 736
    Plugin::LetsEncrypt::_issueCertificate(Plugin::LetsEncrypt=HASH(0x407a860), HASH(0x40e71d0)) called at /var/www/imscp/gui/plugins/LetsEncrypt/backend/LetsEncrypt.pm line 373
    eval {...} called at /var/www/imscp/gui/plugins/LetsEncrypt/backend/LetsEncrypt.pm line 371
    eval {...} called at /var/www/imscp/gui/plugins/LetsEncrypt/backend/LetsEncrypt.pm line 357
    Plugin::LetsEncrypt::run(Plugin::LetsEncrypt=HASH(0x407a860), undef, undef) called at /var/www/imscp/engine/PerlLib/Modules/Plugin.pm line 438
    eval {...} called at /var/www/imscp/engine/PerlLib/Modules/Plugin.pm line 438
    Modules::Plugin::_executePluginAction(Modules::Plugin=HASH(0x400c5a0), "run") called at /var/www/imscp/engine/PerlLib/Modules/Plugin.pm line 387
    Modules::Plugin::_run(Modules::Plugin=HASH(0x400c5a0)) called at /var/www/imscp/engine/PerlLib/Modules/Plugin.pm line 95
    Modules::Plugin::process(Modules::Plugin=HASH(0x400c5a0), 6) called at /var/www/imscp/engine/PerlLib/iMSCP/DbTasksProcessor.pm line 520
    iMSCP::DbTasksProcessor::_processModuleTasks(iMSCP::DbTasksProcessor=HASH(0x3287010), "Modules::Plugin", 6) called at /var/www/imscp/engine/PerlLib/iMSCP/DbTasksProcessor.pm line 487
    eval {...} called at /var/www/imscp/engine/PerlLib/iMSCP/DbTasksProcessor.pm line 453
    iMSCP::DbTasksProcessor::_processModuleDbTasks(iMSCP::DbTasksProcessor=HASH(0x3287010), "Modules::Plugin", "\x{a} SELECT plugin_id AS id, plugin_name AS name\x{a} "..., "per_item_log_file") called at /var/www/imscp/engine/PerlLib/iMSCP/DbTasksProcessor.pm line 62
    iMSCP::DbTasksProcessor::processDbTasks(iMSCP::DbTasksProcessor=HASH(0x3287010)) called at /var/www/imscp/engine/imscp-rqst-mngr line 64
    Forzar reintentoCancelar