Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Problem with smartermail

[nitaish]

There has been a problem with Smartermail since a month and there seems to be no end to the problem. We are finding a lot of spam emails being generated from null senders who use different email accounts on the server for smtp authentication and this creates a lot of problem especially in case of shared hosting as the servers run a few hundred domains. We have implemented strong password policy in the server, but the users who never use webmail don't get the prompt to change the password and they continue with the weak passwords which ultimately creates problem on the server. Does anybody know of any way how to block the null senders from sending emails from the smartermail server?

[LeaTrueman]

Hello,

How you got the info that spam mails are generating from the server. Will that be anytype of email spoofing in which someone is using your emails IDs to send email? Also have you installed any type of spam tools in your server?

[boonchuan]

There is no way to block, but you can stop them at their source. Check Smartermail reports, you should be able to find which accounts are spamming and take action on such accounts

[spdfox]

What version of SmarterMail you have installed?

[ST_BWard]

Hello,

You can set up Internal Spammer Notification (Security | Advanced Settings | Abuse Detection) to be alerted when this does occur so you are able to take action and find the account that is compromised. Since the emails are spam you can enable Outbound SMTP blocking (Security | Antispam Administration) to prevent or minimize the amount of spam that is sent through your server.

If the spammer have a compromised account and are authentication with that account SmarterMail will accept the email and then relay the message.

These are a couple of ideas that may help. If you need further assistance you can open up a support ticket with SmarterTools and our support team will be glad to assist you.

[nitaish]

Originally Posted by ST_BWard

Hello,

You can set up Internal Spammer Notification (Security | Advanced Settings | Abuse Detection) to be alerted when this does occur so you are able to take action and find the account that is compromised. Since the emails are spam you can enable Outbound SMTP blocking (Security | Antispam Administration) to prevent or minimize the amount of spam that is sent through your server.

If the spammer have a compromised account and are authentication with that account SmarterMail will accept the email and then relay the message.

These are a couple of ideas that may help. If you need further assistance you can open up a support ticket with SmarterTools and our support team will be glad to assist you.

This is a known issue and there are many complaints in the Smartertools forums. We have tried lots of options, but the spamming does not stop. Also, we have over 12000 email users and there are lots of users which are being compromised. As you can see it can be difficult to find each of them. The simple option that is required is to disallow sending of emails from null senders.

[nitaish]

Forgot to mention, I am running Smartermail professional edition 5.5.