• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

MailEnable locate Spammer

christiano1203

Basic Pleskian
Hi there,

i have a big problem. My System is a Windows Server 2012 r2 with Plesk 12.

On this system i have installed MailEnable as my Mailserver.

So at the moment something is spam on this server, but i can't find out who is it.

Received: from win02.XXXXXX([MY IP] helo=WIN02.home)
(envelope-from <root@XXXXXXXX>)
id 1XlyHP-00038b-R0
for x; Wed, 05 Nov 2014 11:57:37 +0100
Received: from win02 ([127.0.0.1]) by home with MailEnable ESMTP; Wed, 5 Nov 2014 12:48:49
+0100
Date: Wed, 05 Nov 2014 11:48:49 +0000
Subject: UW PRICING AND AVAILABILITY
To: x
From: MARK <mcollinsafety009@gmail.com>
Reply-To: mcollinsafety009@gmail.com
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
X-Spam-Score: 4.3 (++++)
X-SpamScore: 4.3
X-MailHub-Apparently-To: x
X-MailHub-Forwarded: Yes

Hello Sales,
We are looking to purchase units of the below and would like to have a unit
pricing(educational/government institution)on each you can supply or source for:
ITEMs:
* Enerpac Hand Pump P 392
* Enerpac Hand Pump P 2282
Please note payment for this order is 30 Days Net Term.
Looking forward to read back from you with pricing and availability.
Thank You,
Mark Conley(Purchasing Director)
University of Washington-Extension
3917 University Way NE
Seattle, WA 98105-1120
Ph Num (206)691-8220
Fax Num(206)629-6290
Message-ID: <9C7D2EF931024C00B510486DF596A0A8.MAI@home>

The header is meaning that the spams come from root@, but there is no account with the name root@...

What can I do ? On linux it is so easy to find the spam with qmail or postfix. Why mailenable it is so difficult :(
 
Hello,

You can check the mail enable logs, for more info. If mails are there in queue you can open it and read the headers. In mail enable smtp logs search for recipient address it will give you more info.
 
Back
Top