I’m getting about 50-60 Mail Delivery System bounced emails a minute through my main email address at HaveHost. Had over 550 since midnight and they’re still coming in thick and fast. Anybody else having the same problem? And what does it mean? Is it a HH issue or has my address been hacked etc?
K
Hi Kryten,
I’ve seen this sort of thing before with a server I used to use many years ago. Someone managed to sent out thousands of spam emails using the server and what I was left with was a mail log that filled up almost instantly with responses from bounced messages. The server soon started failing because of the size of these log files.
Check with your contact at HaveHost to see if you can purge the mail log of these errors before they get to you. I’d also take sometime to check that your scripts are as secure as they can be because if someone is using the server to send out spam (rather than just spoofing the return address) then that needs locking down as well.
Regards,
Tim.
On 25 May 2012, at 08:24, Kryten wrote:
I’m getting about 50-60 Mail Delivery System bounced emails a minute through my main email address at HaveHost. Had over 550 since midnight and they’re still coming in thick and fast. Anybody else having the same problem? And what does it mean? Is it a HH issue or has my address been hacked etc?
Tim - thanks for your valuable advice. I’m still awaiting a response from James W. In the meantime I’ve set up a spam filter to dump anything coming in from ‘Mail Delivery System’, so nothing reaches me.
I have only had one angry recipient from a Hotmail address email me to say “Please stop emailing me.” So I emailed him back very briefly apologising profusely and explaining, but he repeated his demand - seems there’s no pleasing some people…“That’s just what Jesus said sir.”
Well…it’s been nearly 12 hours since I raised a Support ticket and nothing from James. The failed bounced emails are still coming through. Don’t know about hacked, but I’m certainly hacked off.
Last night I sent an email to a friend who has his own domain on GoDaddy and got a “Mail delivery failed: returning message to sender” instantly from them. It said,
554 Your access to this mail system has been rejected due to the sending MTA’s poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means.
I tried sending to an account I manage that is also, unfortunately, hosted on GoDaddy, and got the same thing.
I submitted a support ticket to Have Host via their Zendesk support account, but still have not received a reply. However, sending emails to the GoDaddy domain I have are now working.
Kryten, how did you send the support ticket, thru Zendesk or via whatever he has on the have-host.com site now?
Thanks Joe, I started a ticket at the Have-Host site, but haven’t heard diddly in well over 24 hours. Should I be using https://havehost.zendesk.com/ rather than HH?
Appreciate your response Joe, they are still coming about 5 per minute returned Deliver Failure but anything from Mail Delivery System could be any amount as I have set up a filter in cPanel to trash those.
Thanks Joe, I started a ticket at the Have-Host site, but haven’t heard diddly in well over 24 hours. Should I be using https://havehost.zendesk.com/ rather than HH?
Have no idea, that’s why I asked. I had been using the Zendesk one for a while, but I’m not sure if the one on have-host.com is newer.
Appreciate your response Joe, they are still coming about 5 per minute returned Deliver Failure but anything from Mail Delivery System could be any amount as I have set up a filter in cPanel to trash those.
Well thanks, I have raised a ticket at Zen. To try and understand what is happening here, is someone just using my primary email address as the reply to address, whereas in fact may be sending this spam from another unrelated address? Or are these 1000s of spam emails supposed to coming from me? Has there been any sort of hacking involved?
To try and understand what is happening here, is someone just using my primary email address as the reply to address, whereas in fact may be sending this spam from another unrelated address?
I’m guessing it is this. But, in order to know better, you should see if you can find in your mail logs if thousands of messages are being sent from your account (I don’t remember what’s provided as far as that, though), and look at the full headers of one of the bounced messages to see if it looks like it was coming from your mail (universe.have-host.com) or someplace completely different.
Thanks Joe, I’ve had a look in cPanel for web logs, but it doesn’t seem to be an available feature. James did finally respond yesterday, so I’ll have to wait and see. The flood has subsided down to about 4-5 per hour.
K