Re: Spam

I have to add that now the server is not sending or receiving emails,
despite logs like these

Sending email to GMAIL log:

10:00:29.309 [INFO ] o.a.j.s.SendMailHandler - Successfully spooled mail
Mail1653472829276-a2017751-cdae-4625-9f3f-42007513778c from
MaybeSender{mailAddress=Optional[[email protected]]} on
172.17.0.1/172.17.0.1 for [[email protected]]

Receiving email from GMAIL log :

10:06:34.882 [INFO ] o.a.j.s.SendMailHandler - Successfully spooled mail
Mail1653473194868-7c549de9-300a-4f52-bf48-e54abdcac276 from
MaybeSender{mailAddress=Optional[[email protected]]} on
mail-ed1-f50.google.com/209.85.208.50 for [[email protected]]

All CPU cores are at 100%, the mail client is taking a long time to refresh
probably because of the spam issue.

I'm running it on 6GB RAM, 250 GB instance (disk used at 14%)

How can I know which one of my users these spams are originating from?

Best regards,

On Wed, May 25, 2022 at 11:55 AM Bs Serge <[email protected]> wrote:

> Hi all,
>
> I think I have a spam problem, below are my logs,
>
> Are some of MY emails being used to spam other mail servers? coz I have
> logs like these literally every second !!!!!
>
> Best regards,
>
> 09:50:39.704 [INFO ] o.a.j.t.m.r.d.MailDelivrer - No mail server found
> for: affa.gov.au
> 09:50:53.047 [INFO ] o.a.j.t.m.r.d.MailDelivrer - Couldn't connect to
> host, port: 203.13.40.16, 25; timeout 60000
> 09:50:55.352 [INFO ] o.a.j.i.n.ImapChannelUpstreamHandler - Connection
> closed for 172.17.0.1
> 09:50:55.596 [INFO ] o.a.j.t.m.r.d.MailDelivrer - Couldn't connect to
> host, port: 203.13.40.17, 25; timeout 60000
> 09:51:04.528 [INFO ] o.a.j.t.m.r.d.MailDelivrer - Couldn't connect to
> host, port: 203.13.40.17, 25; timeout 60000
> 09:51:07.460 [INFO ] o.a.j.t.m.r.d.MailDelivrer - Couldn't connect to
> host, port: 34.199.119.10, 25; timeout 60000
> 09:51:14.858 [INFO ] o.a.j.d.d.DNSJavaService - Couldn't resolve MX
> records for domain eimirates.net.ae.
> 09:51:14.858 [ERROR] o.a.j.d.d.DNSJavaService - Couldn't resolve IP
> address for host eimirates.net.ae.
> 09:51:39.430 [INFO ] o.a.j.t.m.r.d.MailDelivrer - No mail server found
> for: riantics.co
> 09:51:40.941 [INFO ] o.a.j.t.m.r.d.MailDelivrer - Couldn't connect to
> host, port: 62.38.2.74, 25; timeout 60000
> 09:51:53.091 [INFO ] o.a.j.d.d.DNSJavaService - Couldn't resolve MX
> records for domain bhushan-group.com.
> 09:51:53.092 [ERROR] o.a.j.d.d.DNSJavaService - Couldn't resolve IP
> address for host bhushan-group.com.
> java.net.UnknownHostException: Invalid address: bhushan-group.com
> at org.xbill.DNS.Address.getByAddress(Address.java:353)
> at
> org.apache.james.dnsservice.dnsjava.DNSJavaService.getByName(DNSJavaService.java:446)
> at
> org.apache.james.dnsservice.dnsjava.DNSJavaService.findMXRecords(DNSJavaService.java:344)
> at
> org.apache.james.transport.mailets.remote.delivery.DnsHelper.retrieveHostAddressIterator(DnsHelper.java:43)
> at
> org.apache.james.transport.mailets.remote.delivery.MailDelivrer.tryDeliver(MailDelivrer.java:111)
> at
> org.apache.james.transport.mailets.remote.delivery.MailDelivrer.deliver(MailDelivrer.java:84)
> at
> org.apache.james.transport.mailets.remote.delivery.DeliveryRunnable.attemptDelivery(DeliveryRunnable.java:136)
> at
> org.apache.james.transport.mailets.remote.delivery.DeliveryRunnable.lambda$processMail$3(DeliveryRunnable.java:113)
> at reactor.core.publisher.MonoCreate.subscribe(MonoCreate.java:57)
> at reactor.core.publisher.Mono.subscribe(Mono.java:4046)
> at
> reactor.core.publisher.MonoSubscribeOn$SubscribeOnSubscriber.run(MonoSubscribeOn.java:126)
> at reactor.core.scheduler.WorkerTask.call(WorkerTask.java:84)
> at reactor.core.scheduler.WorkerTask.call(WorkerTask.java:37)
> at java.base/java.util.concurrent.FutureTask.run(Unknown Source)
> at
> java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(Unknown
> Source)
> at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown
> Source)
> at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown
> Source)
> at java.base/java.lang.Thread.run(Unknown Source)
>