Hey everyone,
I have a question about forwarding emails with my Mercury installation. What I basicly want is, the ability to make accounts in my mercury mail, which have their own emailaddresses. For example I create an account for myself,
Username: Crytiqal
Password: <password>
Email: Crytiqal@hotmail.com (for example)
Then I would like that the emails people send to Crytiqal@mydomain.org will be forwarded to Crytiqal@hotmail.com ,and also that I could send emails from Crytiqal@mydomain.org when using my username and password.
Could anyone explain to me what I would have to do, to achieve this?
Thanks in advance!
Greetings,
Crytiqal
EDIT:
Also, Mercury should only accept to forward emails when those emails are send to an existing account.
There are a few different ways to forward messages in Mercury, but the simplest would probably be to use FORWARD files. First make sure that "Allow file-based forwarding specification using FORWARD files" is checked in Core configuration / Advanced. If that is selected there will be an automatic mail forwarding option for each user in Manage local users.
The From header in messages that you send is created by your email client, not by Mercury, so that is where that should be set.
/Rolf
Hello Rolf,
Do I also need to check something else to allow people to forward emails to the accounts? Or will every mail send to any excisting account be accepted by mercury, and it will still block any other (non existing) emails?
I will now create a new account for myself and check if it will get forwarded.
Greetings,
Crytiqal
EDIT:
I tried sending an email, but the mercury responds was:
553 We do not relay non-local mail, sorry.
I thought this would happen. How do I make it possible to ONLY accept incoming emails (and relay emails) for exsiting user accounts only? Or do I just have to allow relaying and it won't accept any other incoming emails anyway?
Thanks in advance
EDIT2: I created a new user and in the forwarding page I added the following lines:
N
I also added my external ip to local domains in the core module configuration
localhost xx.xx.xxx.xxx
I can send an email from my normal email to Crytiqal@xx.xx.xxx.xxx, but it will not forward the email back to me..
What is wrong? Is there a step by step guide somewhere on how to enable forwarding?
Thanks,
Crytiqal
Do I also need to check something else to allow people to forward emails to the accounts?
Forwarding is set for each account in Manage local users.
Or will every mail send to any excisting account be accepted by mercury, and it will still block any other (non existing) emails?
If you only accept mail for existing accounts then messages to non-existing recipients will be blocked.
I tried sending an email, but the mercury responds was:
553 We do not relay non-local mail, sorry
I thought this would happen. How do I make it possible to ONLY accept incoming emails (and relay emails) for exsiting user accounts only? Or do I just have to allow relaying and it won't accept any other incoming emails anyway?
Did you add your domain to local domains in core configuration? Read the help text for this setting very carefully. Changes in domain settings will probably require a restart of Mercury.
I can send an email from my normal email to Crytiqal@xx.xx.xxx.xxx, but it will not forward the email back to me..
No one is going to be using your IP address to send emails to, really, so it's better to concentrate on getting the domain working. Check the logs for MercuryS and core to find out what happened to the message.
/Rolf
I have the forwarding working.
I had to add the total line of Forward-To: email@myip
Now I have to add my domain instead of my ip.
Would this include that I have to change the following settings to my domainname instead of my ip?;
Mercury Core Module Configuration >> General tab
Internet name for this system: <ip>
Mercury Core Module Configuration >> Local domains tab
Local host or server: localhost
Internet name: <ip>
Mercury SMTP Server >> General tab
Announce myself as: <ip>
MercuryE End-to-end SMTP Client Configuration >> General tab
Identify myself as: mymail.<ip>
Thanks in advance
I am sorry for all my questions, but I can't find a help documentation anywhere either :(
When I click on help it gives me the windows help center and it tells me it can't find any help documents for this program.
If your Windows version doesn't support the help system in Mercury you can instead consult the PDF manual. It's in the Mercury directory and it's called man-471.pdf.
"Internet name for this system" should normally be the domain. "Announce myself as" and "Identify myself as" should normally be the FQDN for the host.
Local domains should include all hosts, domains, and IPs that the server will communicate as, please see the manual.
/Rolf
Or you can install the win32-help, if you have x64 based system
Go to www.microsoft.com and search for "Windows Help program (WinHlp32.exe) for Windows"
Works fine!
Cheers Opa56
I have the forwarding of emails working now.
I added the MX record where I purchased the domain name and I added all the localhosts to the file etc etc.
When I send an email from Crytiqal@hotmail.com I receive it at Crytiqal@mydomain.com and vice versa.
I then use Windows Live Hotmail to add the account of Crytiqal@mydomain.com to retrieve the emails.
My last question is, how can I delete emails from the server?
You can log in with POP3 or IMAP to the server, using an email client like Pegasus, Thunderbird or Outlook, to delete messages for the account you log in to.
/Rolf
So I guess it will be better to forward the emails instead of having people have direct access to their email account, just to prevent cluttering from people who don't use these email programs?
(I use Windows Live Mail myself and I don't think when deleting a message in WLM it gets deleted from the server aswell)
Is it possible to delete the message then when it's been collected by a user?
Anyway, thanks for the help Rolf, appreciate it.
Greetings,
Crytiqal
(I will start writing a php script to automaticly add people to the PMAIL.USR file and create the appropriate folder with PASSWD.PM and FORWARD)
Windows Live Mail is an email client just as Pegasus, Outlook etc. and supports POP3 and IMAP. With IMAP you work against the mailbox on the server and can delete messages when you see fit. With POP3 it's a fixed account setting (delete messages from server when downloaded, delete after a certain time, or never delete).
If you want users to always access messages from their Hotmail account (to where they have been forwarded) and not log in to the Mercury server you can set the forwarding option Deliver-Also to N.
/Rolf
Hey everyone,
I got the forwarding working, thanks for that Rolf.
But I now found myself with another problem.
I disabled relaying for non local email, and added my domain name and local and external ip's to the localhost list BUT,
I am flooded with spam emails filling up my resources. I mean, I had 67.000 (!) emails in my queue!
Is there any way of stopping this at all? It is so severe it causes my internet to disconnect every few minutes and I was forced to turn MercuryMail off :(.
Please help me,
Crytiqal
First make sure that "Use strict local relaying restrictions" is checked (MercuryS configuration, Connection control). Then verify that "Accept mail for invalid local addresses" (MercuryS configuration, General) is not checked.
If this is OK you may still receive spam addressed to valid local mailboxes. To stop that you can use one or more of the spam fighting tools in Mercury: SpamHalter, Graywall, Content control, DNS blacklists (MercuryS). There are additional anti-spam addons in the download section as well.
/Rolf
I still receive a lot of emails.
The problem is that it takes ages to bounce them all because they are flooding in.
Mainly they come from @163.com and go to @yahoo.com.tw
Here is a short log for a period of about 5 minutes:
PS: Sorry for the long post but I cannot seem to find an "attach file" button...
T 20110127 111420 4d41538a Connection from 112.133.203.42
T 20110127 111421 4d41538a EHLO PC27
T 20110127 111421 4d41538b Connection from 202.170.84.17
T 20110127 111422 4d41538a RSET
T 20110127 111422 4d41538b EHLO PC49
T 20110127 111423 4d41538a MAIL FROM:<uxbfim@163.com>
T 20110127 111424 4d41538b RSET
T 20110127 111424 4d41538a RCPT TO:<s525052505250@yahoo.com.tw>
E 20110127 111424 4d41538a Relay attempt by 112.133.203.42: from <uxbfim@163.com> to <s525052505250@yahoo.com.tw>.
T 20110127 111425 4d41538b MAIL FROM:<abyv@163.com>
T 20110127 111425 4d41538a Connection closed with 112.133.203.42, 5 sec. elapsed.
T 20110127 111425 4d41538b RCPT TO:<perceptchen@yahoo.com.tw>
E 20110127 111425 4d41538b Relay attempt by 202.170.84.17: from <abyv@163.com> to <perceptchen@yahoo.com.tw>.
T 20110127 111426 4d41538b Connection closed with 202.170.84.17, 5 sec. elapsed.
T 20110127 111434 4d41538c Connection from 210.212.99.148
T 20110127 111435 4d41538c EHLO PC37
T 20110127 111436 4d41538c RSET
T 20110127 111439 4d41538c MAIL FROM:<zcgkosw@163.com>
T 20110127 111440 4d41538c RCPT TO:<dj9962@yahoo.com.tw>
E 20110127 111440 4d41538c Relay attempt by 210.212.99.148: from <zcgkosw@163.com> to <dj9962@yahoo.com.tw>.
T 20110127 111440 4d41538c Connection closed with 210.212.99.148, 6 sec. elapsed.
T 20110127 111441 4d41538d Connection from 85.26.137.195
T 20110127 111448 4d41538e Connection from 201.57.146.148
T 20110127 111449 4d41538f Connection from 114.24.192.44
T 20110127 111449 4d41538e EHLO PC40
T 20110127 111449 4d41538f EHLO user-rr
T 20110127 111449 4d415390 Connection from 115.31.142.67
T 20110127 111450 4d41538e RSET
T 20110127 111450 4d415390 EHLO PC45
T 20110127 111450 4d41538f RSET
T 20110127 111451 4d41538f MAIL FROM:<lktybc@163.com>
T 20110127 111451 4d41538e MAIL FROM:<fjn@163.com>
T 20110127 111451 4d41538f RCPT TO:<fqdj@yahoo.com.tw>
E 20110127 111451 4d41538f Relay attempt by 114.24.192.44: from <lktybc@163.com> to <fqdj@yahoo.com.tw>.
T 20110127 111451 4d41538f Connection closed with 114.24.192.44, 2 sec. elapsed.
T 20110127 111451 4d415390 RSET
T 20110127 111451 4d41538e RCPT TO:<hisoka0220@yahoo.com.tw>
E 20110127 111451 4d41538e Relay attempt by 201.57.146.148: from <fjn@163.com> to <hisoka0220@yahoo.com.tw>.
T 20110127 111452 4d415390 MAIL FROM:<uyiw@163.com>
T 20110127 111452 4d41538e Connection closed with 201.57.146.148, 4 sec. elapsed.
T 20110127 111453 4d415390 RCPT TO:<w.stanley@yahoo.com.tw>
E 20110127 111453 4d415390 Relay attempt by 115.31.142.67: from <uyiw@163.com> to <w.stanley@yahoo.com.tw>.
T 20110127 111453 4d415390 Connection closed with 115.31.142.67, 4 sec. elapsed.
T 20110127 111456 4d41538d EHLO pc00
T 20110127 111508 4d415391 Connection from 189.115.197.178
T 20110127 111508 4d415391 EHLO PC32
T 20110127 111509 4d415391 RSET
T 20110127 111510 4d415391 MAIL FROM:<xbfjnr@163.com>
T 20110127 111511 4d415391 RCPT TO:<ruby12345669@yahoo.com.tw>
E 20110127 111511 4d415391 Relay attempt by 189.115.197.178: from <xbfjnr@163.com> to <ruby12345669@yahoo.com.tw>.
T 20110127 111511 4d415391 Connection closed with 189.115.197.178, 3 sec. elapsed.
T 20110127 111518 4d415392 Connection from 91.121.204.181
T 20110127 111518 4d415392 EHLO PC03
T 20110127 111519 4d415392 RSET
T 20110127 111519 4d415392 MAIL FROM:<dcl@163.com>
T 20110127 111519 4d415392 RCPT TO:<goop@yahoo.com.tw>
E 20110127 111519 4d415392 Relay attempt by 91.121.204.181: from <dcl@163.com> to <goop@yahoo.com.tw>.
T 20110127 111520 4d415392 Connection closed with 91.121.204.181, 2 sec. elapsed.
T 20110127 111520 4d415393 Connection from 58.185.35.121
T 20110127 111523 4d41538d RSET
T 20110127 111523 4d415394 Connection from 202.170.84.17
T 20110127 111524 4d415394 EHLO PC49
T 20110127 111524 4d415393 EHLO PC41
T 20110127 111525 4d415394 RSET
T 20110127 111526 4d415394 MAIL FROM:<abyv@163.com>
T 20110127 111527 4d415395 Connection from 196.192.36.189
T 20110127 111527 4d415394 RCPT TO:<peterli2003@yahoo.com.tw>
E 20110127 111527 4d415394 Relay attempt by 202.170.84.17: from <abyv@163.com> to <peterli2003@yahoo.com.tw>.
T 20110127 111528 4d415395 EHLO PC39
T 20110127 111528 4d415394 Connection closed with 202.170.84.17, 5 sec. elapsed.
T 20110127 111529 4d415395 RSET
T 20110127 111529 4d41538d MAIL FROM:<hlp@163.com>
T 20110127 111529 4d415395 MAIL FROM:<hko@163.com>
T 20110127 111530 4d415393 RSET
T 20110127 111530 4d415395 RCPT TO:<trel617@yahoo.com.tw>
E 20110127 111530 4d415395 Relay attempt by 196.192.36.189: from <hko@163.com> to <trel617@yahoo.com.tw>.
T 20110127 111531 4d415395 Connection closed with 196.192.36.189, 4 sec. elapsed.
T 20110127 111533 4d415393 MAIL FROM:<qemopgy@163.com>
T 20110127 111534 4d415393 RCPT TO:<tiha801015@yahoo.com.tw>
E 20110127 111534 4d415393 Relay attempt by 58.185.35.121: from <qemopgy@163.com> to <tiha801015@yahoo.com.tw>.
T 20110127 111534 4d415396 Connection from 193.39.118.19
T 20110127 111535 4d415396 EHLO PC49
T 20110127 111535 4d415393 Connection closed with 58.185.35.121, 15 sec. elapsed.
T 20110127 111536 4d415397 Connection from 112.133.203.42
T 20110127 111537 4d415397 EHLO PC27
T 20110127 111538 4d41538d RCPT TO:<poppyflower_0@yahoo.com.tw>
E 20110127 111538 4d41538d Relay attempt by 85.26.137.195: from <hlp@163.com> to <poppyflower_0@yahoo.com.tw>.
T 20110127 111539 4d415397 RSET
T 20110127 111539 4d415397 MAIL FROM:<uxbfim@163.com>
T 20110127 111540 4d415397 RCPT TO:<s7164@yahoo.com.tw>
E 20110127 111540 4d415397 Relay attempt by 112.133.203.42: from <uxbfim@163.com> to <s7164@yahoo.com.tw>.
T 20110127 111541 4d415397 Connection closed with 112.133.203.42, 5 sec. elapsed.
T 20110127 111548 4d415398 Connection from 187.8.236.91
T 20110127 111549 4d415398 EHLO pc50
T 20110127 111549 4d415398 RSET
T 20110127 111550 4d415398 MAIL FROM:<vuqs@163.com>
T 20110127 111551 4d415398 RCPT TO:<notename@yahoo.com.tw>
E 20110127 111551 4d415398 Relay attempt by 187.8.236.91: from <vuqs@163.com> to <notename@yahoo.com.tw>.
T 20110127 111551 4d415398 Connection closed with 187.8.236.91, 3 sec. elapsed.
T 20110127 111601 4d41538d Connection closed with 85.26.137.195, 80 sec. elapsed.
T 20110127 111606 4d415396 Connection closed with 193.39.118.19, 32 sec. elapsed.
T 20110127 111606 4d415399 Connection from 189.115.197.178
T 20110127 111607 4d415399 EHLO PC37
T 20110127 111608 4d415399 RSET
T 20110127 111608 4d415399 MAIL FROM:<zcgkosw@163.com>
T 20110127 111609 4d41539a Connection from 114.24.192.44
T 20110127 111609 4d41539a EHLO user-rr
T 20110127 111609 4d415399 RCPT TO:<dmthj@yahoo.com.tw>
E 20110127 111609 4d415399 Relay attempt by 189.115.197.178: from <zcgkosw@163.com> to <dmthj@yahoo.com.tw>.
T 20110127 111610 4d415399 Connection closed with 189.115.197.178, 4 sec. elapsed.
T 20110127 111610 4d41539a RSET
T 20110127 111610 4d41539a MAIL FROM:<lktybc@163.com>
T 20110127 111611 4d41539a RCPT TO:<free_perfect01@yahoo.com.tw>
E 20110127 111611 4d41539a Relay attempt by 114.24.192.44: from <lktybc@163.com> to <free_perfect01@yahoo.com.tw>.
T 20110127 111611 4d41539a Connection closed with 114.24.192.44, 2 sec. elapsed.
T 20110127 111619 4d41539b Connection from 58.240.237.132
T 20110127 111620 4d41539c Connection from 219.235.110.13
T 20110127 111620 4d41539b EHLO pc12
T 20110127 111620 4d41539c EHLO PC46
T 20110127 111620 4d41539d Connection from 202.170.84.17
T 20110127 111621 4d41539d EHLO PC40
T 20110127 111621 4d41539e Connection from 115.96.107.192
T 20110127 111621 4d41539e Connection closed with 115.96.107.192, 0 sec. elapsed.
T 20110127 111622 4d41539c RSET
T 20110127 111622 4d41539b RSET
T 20110127 111623 4d41539b MAIL FROM:<qksx@163.com>
T 20110127 111623 4d41539c MAIL FROM:<bkr@163.com>
T 20110127 111623 4d41539d RSET
T 20110127 111623 4d41539b RCPT TO:<j8801967@yahoo.com.tw>
E 20110127 111623 4d41539b Relay attempt by 58.240.237.132: from <qksx@163.com> to <j8801967@yahoo.com.tw>.
T 20110127 111623 4d41539c RCPT TO:<ally0126@yahoo.com.tw>
E 20110127 111623 4d41539c Relay attempt by 219.235.110.13: from <bkr@163.com> to <ally0126@yahoo.com.tw>.
T 20110127 111624 4d41539d MAIL FROM:<fjn@163.com>
T 20110127 111624 4d41539b Connection closed with 58.240.237.132, 5 sec. elapsed.
T 20110127 111624 4d41539c Connection closed with 219.235.110.13, 4 sec. elapsed.
T 20110127 111624 4d41539d RCPT TO:<hkapa@yahoo.com.tw>
E 20110127 111624 4d41539d Relay attempt by 202.170.84.17: from <fjn@163.com> to <hkapa@yahoo.com.tw>.
T 20110127 111625 4d41539d Connection closed with 202.170.84.17, 5 sec. elapsed.
T 20110127 111628 4d41539f Connection from 190.121.135.178
T 20110127 111629 4d41539f EHLO PC32
T 20110127 111629 4d41539f RSET
T 20110127 111630 4d41539f MAIL FROM:<xbfjnr@163.com>
T 20110127 111631 4d41539f RCPT TO:<rubytung19890227@yahoo.com.tw>
E 20110127 111631 4d41539f Relay attempt by 190.121.135.178: from <xbfjnr@163.com> to <rubytung19890227@yahoo.com.tw>.
T 20110127 111636 4d4153a0 Connection from 218.31.134.111
T 20110127 111637 4d4153a0 EHLO PC47
T 20110127 111638 4d4153a0 RSET
T 20110127 111638 4d4153a0 MAIL FROM:<xxxtite@163.com>
T 20110127 111639 4d4153a0 RCPT TO:<sky0930449691@yahoo.com.tw>
E 20110127 111639 4d4153a0 Relay attempt by 218.31.134.111: from <xxxtite@163.com> to <sky0930449691@yahoo.com.tw>.
T 20110127 111640 4d4153a0 Connection closed with 218.31.134.111, 4 sec. elapsed.
T 20110127 111644 4d41539f Connection closed with 190.121.135.178, 16 sec. elapsed.
T 20110127 111649 4d4153a1 Connection from 123.49.51.106
T 20110127 111649 4d4153a1 EHLO PC03
T 20110127 111650 4d4153a1 RSET
T 20110127 111651 4d4153a1 MAIL FROM:<dcl@163.com>
T 20110127 111652 4d4153a1 RCPT TO:<gp6_cj84@yahoo.com.tw>
E 20110127 111652 4d4153a1 Relay attempt by 123.49.51.106: from <dcl@163.com> to <gp6_cj84@yahoo.com.tw>.
T 20110127 111653 4d4153a1 Connection closed with 123.49.51.106, 4 sec. elapsed.
T 20110127 111657 4d4153a2 Connection from 118.97.235.66
T 20110127 111657 4d4153a2 EHLO PC27
T 20110127 111657 4d4153a3 Connection from 119.80.40.45
T 20110127 111658 4d4153a2 RSET
T 20110127 111659 4d4153a3 EHLO pc00
T 20110127 111659 4d4153a2 MAIL FROM:<uxbfim@163.com>
T 20110127 111700 4d4153a2 RCPT TO:<s858a1009@yahoo.com.tw>
E 20110127 111700 4d4153a2 Relay attempt by 118.97.235.66: from <uxbfim@163.com> to <s858a1009@yahoo.com.tw>.
T 20110127 111700 4d4153a3 RSET
T 20110127 111700 4d4153a2 Connection closed with 118.97.235.66, 3 sec. elapsed.
T 20110127 111701 4d4153a3 MAIL FROM:<hlp@163.com>
T 20110127 111702 4d4153a3 RCPT TO:<pp2013@yahoo.com.tw>
E 20110127 111702 4d4153a3 Relay attempt by 119.80.40.45: from <hlp@163.com> to <pp2013@yahoo.com.tw>.
T 20110127 111702 4d4153a3 Connection closed with 119.80.40.45, 5 sec. elapsed.
T 20110127 111707 4d4153a4 Connection from 218.248.21.114
T 20110127 111708 4d4153a4 EHLO PC36
T 20110127 111710 4d4153a4 RSET
T 20110127 111710 4d4153a4 MAIL FROM:<ydinrw@163.com>
T 20110127 111711 4d4153a4 RCPT TO:<chaiweiher@yahoo.com.tw>
E 20110127 111711 4d4153a4 Relay attempt by 218.248.21.114: from <ydinrw@163.com> to <chaiweiher@yahoo.com.tw>.
T 20110127 111712 4d4153a4 Connection closed with 218.248.21.114, 5 sec. elapsed.
T 20110127 111719 4d4153a5 Connection from 121.22.40.185
T 20110127 111720 4d4153a5 EHLO PC42
T 20110127 111721 4d4153a5 RSET
T 20110127 111721 4d4153a5 MAIL FROM:<mvx@163.com>
T 20110127 111722 4d4153a6 Connection from 58.240.237.132
T 20110127 111722 4d4153a5 RCPT TO:<dio_s4@yahoo.com.tw>
E 20110127 111722 4d4153a5 Relay attempt by 121.22.40.185: from <mvx@163.com> to <dio_s4@yahoo.com.tw>.
T 20110127 111723 4d4153a6 EHLO pc12
T 20110127 111723 4d4153a5 Connection closed with 121.22.40.185, 4 sec. elapsed.
T 20110127 111724 4d4153a6 RSET
T 20110127 111725 4d4153a6 MAIL FROM:<qksx@163.com>
T 20110127 111725 4d4153a7 Connection from 196.192.36.189
T 20110127 111725 4d4153a6 RCPT TO:<jack_lin_99@yahoo.com.tw>
E 20110127 111725 4d4153a6 Relay attempt by 58.240.237.132: from <qksx@163.com> to <jack_lin_99@yahoo.com.tw>.
T 20110127 111726 4d4153a7 Connection closed with 196.192.36.189, 1 sec. elapsed.
T 20110127 111726 4d4153a6 Connection closed with 58.240.237.132, 4 sec. elapsed.
T 20110127 111727 4d4153a8 Connection from 203.88.213.134
T 20110127 111728 4d4153a9 Connection from 114.24.192.44
T 20110127 111728 4d4153a9 EHLO user-rr
T 20110127 111729 4d4153a9 RSET
T 20110127 111729 4d4153aa Connection from 119.145.69.5
T 20110127 111729 4d4153a9 MAIL FROM:<lktybc@163.com>
T 20110127 111730 4d4153aa EHLO PC45
T 20110127 111730 4d4153a9 RCPT TO:<friendship00123@yahoo.com.tw>
E 20110127 111730 4d4153a9 Relay attempt by 114.24.192.44: from <lktybc@163.com> to <friendship00123@yahoo.com.tw>.
T 20110127 111730 4d4153a9 Connection closed with 114.24.192.44, 2 sec. elapsed.
T 20110127 111731 4d4153aa RSET
T 20110127 111731 4d4153a8 EHLO PC49
T 20110127 111733 4d4153aa MAIL FROM:<uyiw@163.com>
T 20110127 111733 4d4153aa RCPT TO:<waba@yahoo.com.tw>
E 20110127 111733 4d4153aa Relay attempt by 119.145.69.5: from <uyiw@163.com> to <waba@yahoo.com.tw>.
T 20110127 111733 4d4153a8 RSET
T 20110127 111733 4d4153aa Connection closed with 119.145.69.5, 4 sec. elapsed.
T 20110127 111734 4d4153a8 MAIL FROM:<abyv@163.com>
T 20110127 111740 4d4153a8 RCPT TO:<photopress.tw@yahoo.com.tw>
E 20110127 111740 4d4153a8 Relay attempt by 203.88.213.134: from <abyv@163.com> to <photopress.tw@yahoo.com.tw>.
T 20110127 111741 4d4153ab Connection from 218.75.124.34
T 20110127 111741 4d4153ac Connection from 190.147.137.80
T 20110127 111741 4d4153a8 Connection closed with 203.88.213.134, 14 sec. elapsed.
T 20110127 111741 4d4153ab EHLO PC47
T 20110127 111742 4d4153ac EHLO PC32
T 20110127 111742 4d4153ac RSET
T 20110127 111743 4d4153ab RSET
T 20110127 111743 4d4153ac MAIL FROM:<xbfjnr@163.com>
T 20110127 111743 4d4153ab MAIL FROM:<xxxtite@163.com>
T 20110127 111743 4d4153ac RCPT TO:<rwflky180@yahoo.com.tw>
E 20110127 111743 4d4153ac Relay attempt by 190.147.137.80: from <xbfjnr@163.com> to <rwflky180@yahoo.com.tw>.
T 20110127 111744 4d4153ab RCPT TO:<slh0104@yahoo.com.tw>
E 20110127 111744 4d4153ab Relay attempt by 218.75.124.34: from <xxxtite@163.com> to <slh0104@yahoo.com.tw>.
T 20110127 111744 4d4153ab Connection closed with 218.75.124.34, 3 sec. elapsed.
T 20110127 111745 4d4153ad Connection from 211.147.3.75
T 20110127 111745 4d4153ad EHLO PC24
T 20110127 111746 4d4153ad RSET
T 20110127 111747 4d4153ae Connection from 205.213.195.70
T 20110127 111747 4d4153ad MAIL FROM:<xyd@163.com>
T 20110127 111747 4d4153ae EHLO PC40
T 20110127 111748 4d4153af Connection from 115.252.138.242
T 20110127 111748 4d4153ad RCPT TO:<afat7077@yahoo.com.tw>
E 20110127 111748 4d4153ad Relay attempt by 211.147.3.75: from <xyd@163.com> to <afat7077@yahoo.com.tw>.
T 20110127 111748 4d4153ae RSET
T 20110127 111748 4d4153ad Connection closed with 211.147.3.75, 3 sec. elapsed.
T 20110127 111749 4d4153ae MAIL FROM:<fjn@163.com>
T 20110127 111749 4d4153ae RCPT TO:<hobi178@yahoo.com.tw>
E 20110127 111749 4d4153ae Relay attempt by 205.213.195.70: from <fjn@163.com> to <hobi178@yahoo.com.tw>.
T 20110127 111749 4d4153af EHLO pc48
T 20110127 111750 4d4153ae Connection closed with 205.213.195.70, 3 sec. elapsed.
T 20110127 111752 4d4153af RSET
T 20110127 111752 4d4153af MAIL FROM:<nmdec@163.com>
T 20110127 111753 4d4153af RCPT TO:<m0926405358@yahoo.com.tw>
E 20110127 111753 4d4153af Relay attempt by 115.252.138.242: from <nmdec@163.com> to <m0926405358@yahoo.com.tw>.
T 20110127 111754 4d4153af Connection closed with 115.252.138.242, 6 sec. elapsed.
T 20110127 111756 4d4153ac Connection closed with 190.147.137.80, 15 sec. elapsed.
T 20110127 111757 4d4153b0 Connection from 59.90.82.125
T 20110127 111758 4d4153b0 EHLO PC39
T 20110127 111800 4d4153b1 Connection from 78.83.169.151
T 20110127 111802 4d4153b0 RSET
T 20110127 111803 4d4153b0 MAIL FROM:<hko@163.com>
T 20110127 111804 4d4153b0 RCPT TO:<ts00096966@yahoo.com.tw>
E 20110127 111804 4d4153b0 Relay attempt by 59.90.82.125: from <hko@163.com> to <ts00096966@yahoo.com.tw>.
T 20110127 111804 4d4153b1 EHLO PC41
T 20110127 111805 4d4153b0 Connection closed with 59.90.82.125, 8 sec. elapsed.
T 20110127 111805 4d4153b1 RSET
T 20110127 111806 4d4153b1 MAIL FROM:<qemopgy@163.com>
T 20110127 111806 4d4153b1 RCPT TO:<tina60727t@yahoo.com.tw>
E 20110127 111806 4d4153b1 Relay attempt by 78.83.169.151: from <qemopgy@163.com> to <tina60727t@yahoo.com.tw>.
T 20110127 111807 4d4153b1 Connection closed with 78.83.169.151, 7 sec. elapsed.
T 20110127 111817 4d4153b2 Connection from 200.164.224.247
T 20110127 111818 4d4153b2 EHLO PC49
T 20110127 111819 4d4153b2 RSET
T 20110127 111819 4d4153b2 MAIL FROM:<qaxxo@163.com>
T 20110127 111820 4d4153b2 RCPT TO:<adamsdf@yahoo.com.tw>
E 20110127 111820 4d4153b2 Relay attempt by 200.164.224.247: from <qaxxo@163.com> to <adamsdf@yahoo.com.tw>.
T 20110127 111820 4d4153b3 Connection from 91.207.142.194
T 20110127 111821 4d4153b2 Connection closed with 200.164.224.247, 4 sec. elapsed.
T 20110127 111822 4d4153b4 Connection from 119.194.158.121
T 20110127 111822 4d4153b3 EHLO PC03
T 20110127 111822 4d4153b4 EHLO pc00
T 20110127 111823 4d4153b3 RSET
T 20110127 111823 4d4153b4 RSET
T 20110127 111823 4d4153b4 MAIL FROM:<hlp@163.com>
T 20110127 111824 4d4153b3 MAIL FROM:<dcl@163.com>
T 20110127 111824 4d4153b4 RCPT TO:<power951@yahoo.com.tw>
E 20110127 111824 4d4153b4 Relay attempt by 119.194.158.121: from <hlp@163.com> to <power951@yahoo.com.tw>.
T 20110127 111824 4d4153b3 RCPT TO:<grace_young2001@yahoo.com.tw>
E 20110127 111824 4d4153b3 Relay attempt by 91.207.142.194: from <dcl@163.com> to <grace_young2001@yahoo.com.tw>.
T 20110127 111824 4d4153b4 Connection closed with 119.194.158.121, 2 sec. elapsed.
T 20110127 111825 4d4153b5 Connection from 58.240.237.132
T 20110127 111825 4d4153b6 Connection from 200.146.104.45
T 20110127 111825 4d4153b3 Connection closed with 91.207.142.194, 5 sec. elapsed.
T 20110127 111825 4d4153b6 EHLO pc50
T 20110127 111825 4d4153b5 EHLO pc12
T 20110127 111826 4d4153b6 RSET
T 20110127 111827 4d4153b5 RSET
T 20110127 111827 4d4153b6 MAIL FROM:<vuqs@163.com>
T 20110127 111827 4d4153b6 RCPT TO:<nsxi@yahoo.com.tw>
E 20110127 111827 4d4153b6 Relay attempt by 200.146.104.45: from <vuqs@163.com> to <nsxi@yahoo.com.tw>.
T 20110127 111828 4d4153b6 Connection closed with 200.146.104.45, 3 sec. elapsed.
T 20110127 111828 4d4153b5 MAIL FROM:<qksx@163.com>
T 20110127 111829 4d4153b5 RCPT TO:<jackye5977@yahoo.com.tw>
E 20110127 111829 4d4153b5 Relay attempt by 58.240.237.132: from <qksx@163.com> to <jackye5977@yahoo.com.tw>.
T 20110127 111830 4d4153b5 Connection closed with 58.240.237.132, 5 sec. elapsed.
T 20110127 111833 4d4153b7 Connection from 218.56.50.213
T 20110127 111833 4d4153b7 EHLO PC36
T 20110127 111835 4d4153b7 RSET
T 20110127 111837 4d4153b7 MAIL FROM:<ydinrw@163.com>
T 20110127 111838 4d4153b7 RCPT TO:<changboos@yahoo.com.tw>
E 20110127 111838 4d4153b7 Relay attempt by 218.56.50.213: from <ydinrw@163.com> to <changboos@yahoo.com.tw>.
T 20110127 111839 4d4153b7 Connection closed with 218.56.50.213, 6 sec. elapsed.
T 20110127 111840 4d4153b8 Connection from 213.137.40.105
T 20110127 111840 4d4153b8 Connection closed with 213.137.40.105, 0 sec. elapsed.
T 20110127 111847 4d4153b9 Connection from 114.24.192.44
T 20110127 111848 4d4153b9 EHLO user-rr
T 20110127 111849 4d4153b9 RSET
T 20110127 111849 4d4153b9 MAIL FROM:<lktybc@163.com>
T 20110127 111849 4d4153b9 RCPT TO:<fulong_tsai@yahoo.com.tw>
E 20110127 111849 4d4153b9 Relay attempt by 114.24.192.44: from <lktybc@163.com> to <fulong_tsai@yahoo.com.tw>.
T 20110127 111850 4d4153b9 Connection closed with 114.24.192.44, 3 sec. elapsed.
T 20110127 111902 4d4153ba Connection from 88.255.34.210
T 20110127 111902 4d4153ba EHLO PC24
T 20110127 111903 4d4153ba RSET
T 20110127 111903 4d4153ba MAIL FROM:<xyd@163.com>
T 20110127 111904 4d4153ba RCPT TO:<aggiechuang@yahoo.com.tw>
E 20110127 111904 4d4153ba Relay attempt by 88.255.34.210: from <xyd@163.com> to <aggiechuang@yahoo.com.tw>.
T 20110127 111904 4d4153ba Connection closed with 88.255.34.210, 2 sec. elapsed.
T 20110127 111909 4d4153bb Connection from 195.117.61.6
T 20110127 111909 4d4153bb EHLO PC32
T 20110127 111911 4d4153bb RSET
T 20110127 111911 4d4153bb MAIL FROM:<ruybf@163.com>
T 20110127 111912 4d4153bb RCPT TO:<s11707@yahoo.com.tw>
E 20110127 111912 4d4153bb Relay attempt by 195.117.61.6: from <ruybf@163.com> to <s11707@yahoo.com.tw>.
T 20110127 111912 4d4153bb Connection closed with 195.117.61.6, 3 sec. elapsed.
T 20110127 111918 4d4153bc Connection from 222.216.108.50
T 20110127 111919 4d4153bc EHLO PC46
T 20110127 111919 4d4153bc RSET
T 20110127 111920 4d4153bd Connection from 218.17.167.169
T 20110127 111920 4d4153bc MAIL FROM:<luvph@163.com>
T 20110127 111920 4d4153bd EHLO PC49
T 20110127 111921 4d4153bd RSET
T 20110127 111921 4d4153bd MAIL FROM:<abyv@163.com>
T 20110127 111922 4d4153bd RCPT TO:<pili7502@yahoo.com.tw>
E 20110127 111922 4d4153bd Relay attempt by 218.17.167.169: from <abyv@163.com> to <pili7502@yahoo.com.tw>.
T 20110127 111922 4d4153bc RCPT TO:<allonestart@yahoo.com.tw>
E 20110127 111922 4d4153bc Relay attempt by 222.216.108.50: from <luvph@163.com> to <allonestart@yahoo.com.tw>.
T 20110127 111922 4d4153bd Connection closed with 218.17.167.169, 2 sec. elapsed.
T 20110127 111923 4d4153bc Connection closed with 222.216.108.50, 5 sec. elapsed.
T 20110127 111938 4d4153be Connection from 121.18.77.14
T 20110127 111939 4d4153be EHLO pc48
T 20110127 111939 4d4153bf Connection from 95.159.73.152
T 20110127 111940 4d4153be RSET
T 20110127 111940 4d4153bf EHLO PC03
T 20110127 111940 4d4153be MAIL FROM:<nmdec@163.com>
T 20110127 111941 4d4153be RCPT TO:<m6lovea@yahoo.com.tw>
E 20110127 111941 4d4153be Relay attempt by 121.18.77.14: from <nmdec@163.com> to <m6lovea@yahoo.com.tw>.
T 20110127 111941 4d4153bf RSET
T 20110127 111942 4d4153be Connection closed with 121.18.77.14, 4 sec. elapsed.
T 20110127 111942 4d4153bf MAIL FROM:<icjnwos@163.com>
T 20110127 111943 4d4153bf RCPT TO:<green901129@yahoo.com.tw>
E 20110127 111943 4d4153bf Relay attempt by 95.159.73.152: from <icjnwos@163.com> to <green901129@yahoo.com.tw>.
T 20110127 111943 4d4153bf Connection closed with 95.159.73.152, 4 sec. elapsed.
T 20110127 111955 4d4153c0 Connection from 218.56.50.213
T 20110127 111956 4d4153c0 EHLO PC36
T 20110127 111957 4d4153c0 RSET
T 20110127 111958 4d4153c0 MAIL FROM:<ydinrw@163.com>
T 20110127 111958 4d4153c0 RCPT TO:<chen530520@yahoo.com.tw>
E 20110127 111958 4d4153c0 Relay attempt by 218.56.50.213: from <ydinrw@163.com> to <chen530520@yahoo.com.tw>.
T 20110127 111959 4d4153c0 Connection closed with 218.56.50.213, 4 sec. elapsed.
T 20110127 112001 4d4153c1 Connection from 200.55.148.18
T 20110127 112003 4d4153c2 Connection from 221.2.144.135
T 20110127 112003 4d4153c2 EHLO PC47
T 20110127 112005 4d4153c2 RSET
T 20110127 112005 4d4153c1 EHLO PC45
T 20110127 112005 4d4153c2 MAIL FROM:<xxxtite@163.com>
T 20110127 112006 4d4153c2 RCPT TO:<smithlinchja@yahoo.com.tw>
E 20110127 112006 4d4153c2 Relay attempt by 221.2.144.135: from <xxxtite@163.com> to <smithlinchja@yahoo.com.tw>.
T 20110127 112007 4d4153c2 Connection closed with 221.2.144.135, 4 sec. elapsed.
T 20110127 112008 4d4153c3 Connection from 114.24.192.44
T 20110127 112008 4d4153c3 EHLO user-rr
T 20110127 112008 4d4153c4 Connection from 203.128.88.132
T 20110127 112009 4d4153c4 EHLO PC40
T 20110127 112009 4d4153c3 RSET
T 20110127 112010 4d4153c3 MAIL FROM:<lktybc@163.com>
T 20110127 112010 4d4153c4 RSET
T 20110127 112010 4d4153c3 RCPT TO:<fuzzymoontater@yahoo.com.tw>
E 20110127 112010 4d4153c3 Relay attempt by 114.24.192.44: from <lktybc@163.com> to <fuzzymoontater@yahoo.com.tw>.
T 20110127 112010 4d4153c4 MAIL FROM:<fjn@163.com>
T 20110127 112010 4d4153c3 Connection closed with 114.24.192.44, 2 sec. elapsed.
T 20110127 112011 4d4153c4 RCPT TO:<honglingwu@yahoo.com.tw>
E 20110127 112011 4d4153c4 Relay attempt by 203.128.88.132: from <fjn@163.com> to <honglingwu@yahoo.com.tw>.
T 20110127 112011 4d4153c4 Connection closed with 203.128.88.132, 3 sec. elapsed.
T 20110127 112012 4d4153c5 Connection from 213.239.214.120
T 20110127 112012 4d4153c6 Connection from 200.75.42.66
T 20110127 112012 4d4153c5 EHLO PC24
T 20110127 112013 4d4153c1 RSET
T 20110127 112013 4d4153c5 RSET
T 20110127 112013 4d4153c5 MAIL FROM:<xyd@163.com>
T 20110127 112014 4d4153c5 RCPT TO:<agwnwn@yahoo.com.tw>
E 20110127 112014 4d4153c5 Relay attempt by 213.239.214.120: from <xyd@163.com> to <agwnwn@yahoo.com.tw>.
T 20110127 112014 4d4153c5 Connection closed with 213.239.214.120, 2 sec. elapsed.
T 20110127 112017 4d4153c1 MAIL FROM:<uyiw@163.com>
T 20110127 112021 4d4153c7 Connection from 121.166.80.65
T 20110127 112021 4d4153c7 Connection closed with 121.166.80.65, 0 sec. elapsed.
T 20110127 112022 4d4153c1 RCPT TO:<wanlin1007@yahoo.com.tw>
E 20110127 112022 4d4153c1 Relay attempt by 200.55.148.18: from <uyiw@163.com> to <wanlin1007@yahoo.com.tw>.
T 20110127 112023 4d4153c8 Connection from 195.117.61.6
T 20110127 112025 4d4153c8 EHLO PC32
T 20110127 112026 4d4153c8 RSET
T 20110127 112026 4d4153c8 MAIL FROM:<ruybf@163.com>
T 20110127 112027 4d4153c1 Connection closed with 200.55.148.18, 26 sec. elapsed.
T 20110127 112027 4d4153c8 RCPT TO:<s26099215@yahoo.com.tw>
E 20110127 112027 4d4153c8 Relay attempt by 195.117.61.6: from <ruybf@163.com> to <s26099215@yahoo.com.tw>.
T 20110127 112028 4d4153c8 Connection closed with 195.117.61.6, 5 sec. elapsed.
T 20110127 112031 4d4153c9 Connection from 217.23.4.221
T 20110127 112031 4d4153ca Connection from 115.248.202.21
T 20110127 112031 4d4153c9 EHLO PC49
T 20110127 112031 4d4153ca EHLO PC39
T 20110127 112031 4d4153c9 RSET
T 20110127 112032 4d4153c9 MAIL FROM:<abyv@163.com>
T 20110127 112032 4d4153ca RSET
T 20110127 112032 4d4153c9 RCPT TO:<pink58156@yahoo.com.tw>
E 20110127 112032 4d4153c9 Relay attempt by 217.23.4.221: from <abyv@163.com> to <pink58156@yahoo.com.tw>.
T 20110127 112032 4d4153ca MAIL FROM:<hko@163.com>
T 20110127 112032 4d4153c9 Connection closed with 217.23.4.221, 1 sec. elapsed.
T 20110127 112033 4d4153ca RCPT TO:<tsengken1970@yahoo.com.tw>
E 20110127 112033 4d4153ca Relay attempt by 115.248.202.21: from <hko@163.com> to <tsengken1970@yahoo.com.tw>.
T 20110127 112034 4d4153ca Connection closed with 115.248.202.21, 3 sec. elapsed.
T 20110127 112037 4d4153c6 EHLO PC42
T 20110127 112038 4d4153c6 RSET
T 20110127 112040 4d4153c6 MAIL FROM:<mvx@163.com>
T 20110127 112044 4d4153cb Connection from 119.145.69.5
T 20110127 112045 4d4153cb EHLO pc48
T 20110127 112045 4d4153c6 RCPT TO:<djudy99@yahoo.com.tw>
E 20110127 112045 4d4153c6 Relay attempt by 200.75.42.66: from <mvx@163.com> to <djudy99@yahoo.com.tw>.
T 20110127 112046 4d4153c6 Connection closed with 200.75.42.66, 34 sec. elapsed.
T 20110127 112047 4d4153cb RSET
T 20110127 112048 4d4153cb MAIL FROM:<nmdec@163.com>
T 20110127 112048 4d4153cb RCPT TO:<m200325@yahoo.com.tw>
E 20110127 112048 4d4153cb Relay attempt by 119.145.69.5: from <nmdec@163.com> to <m200325@yahoo.com.tw>.
T 20110127 112049 4d4153cb Connection closed with 119.145.69.5, 5 sec. elapsed.
T 20110127 112113 4d4153cc Connection from 121.166.80.65
T 20110127 112113 4d4153cc EHLO PC03
T 20110127 112114 4d4153cd Connection from 79.127.65.199
T 20110127 112114 4d4153cc RSET
T 20110127 112115 4d4153cc MAIL FROM:<icjnwos@163.com>
T 20110127 112115 4d4153cc RCPT TO:<grimempire@yahoo.com.tw>
E 20110127 112115 4d4153cc Relay attempt by 121.166.80.65: from <icjnwos@163.com> to <grimempire@yahoo.com.tw>.
T 20110127 112115 4d4153cd EHLO PC41
T 20110127 112116 4d4153cc Connection closed with 121.166.80.65, 3 sec. elapsed.
It is bouncing every single one of them, but it's a BIG load which is hard to coop with. I didn't have this problem before I added my domain name in the anounce myself as but my ip.
I don't understand why I am so severly under "attack". Is there any way to block these connections at the door (my router maybe?).
I am greatfull for any tips.
Greetings,
Crytiqal
> I still receive a lot of emails.
> The problem is that it takes ages to bounce them all because they are flooding in.
> Mainly they come from @163.com and go to @yahoo.com.tw
Almost all of the connecting IP addresses listed are on either Spamhaus or Spamcop blacklists. You might want to try using these blacklists in MercuryS. I started using these two blacklists to reject after I used them for tagging only and moving the message to a spam account based on the tag.
I use the following in the MS_SPAM.MER
Begin
Name: SpamHaus-2-8
Enabled: Y
QueryType: Blacklist
QueryForm: Address
Hostname: zen.spamhaus.org
Strictness: Range 127.0.0.2 - 127.0.0.8
Action: Reject
Parameter: Blocked by SpamHaus.org See http://spamhaus.org for removal instructions
End
Begin
Name: SpamCop
Enabled: Y
QueryType: Blacklist
QueryForm: Address
Hostname: bl.spamcop.net
Strictness: Normal
Action: Reject
Parameter: Spam blocked see: http://spamcop.net/bl.shtml?
End
All connections in the log were, as far as I can see, identified as relay attempts and terminated, so there should have been no bounce messages.
You get spam connections because you have port 25 open (which you of course need to have to run a mail server), not because of any setting in Mercury.
The only way to stop spammers in a router or firewall would be by IP address, but there is usually a large number of sending systems involved, so that's probably not possible.
/Rolf
Thanks Thomas, that sure is a breath of relief.
Only a few emails get through in my General/incoming jobs, but a LOT of the emails get rejected by spamhaus.
I still am worried tho, there are just so many. And then I am talking about 10+ emails per minute! Is this normal for a (private) email server to get so many emails? How they all get a hold of my address?
And are these "attacks" also going on when I didn't host the MercuryMail but they just couldn't pass through port 25 then?
Do you reckon it will become less over time? Fewer emails that try to connect via my host after they all get rejected?
Greetings,
Crytiqal
[quote user="Crytiqal"]And then I am talking about 10+ emails per minute! Is this normal for a (private) email server to get so many emails? How they all get a hold of my address?
[/quote]No, it's not normal. This is because you were running an open relay. You got found by bots hunting IP addresses, and added to their lists, so they could start pumping spam through your machine, hence the 67,000 queued messages you mentioned earlier. Now that you have restricted relaying they are getting denied by Mercury.
[quote]And are these "attacks" also going on when I didn't host the MercuryMail but they just couldn't pass through port 25 then?[/quote]No, it started when their probes identified your open relay.[quote]
Do you reckon it will become less over time? Fewer emails that try to connect via my host after they all get rejected?
[/quote]Maybe. It depends if the spammers systems are set to remove dead relays from the lists used by the botnet. I suspect it will take some time to subside.
Thanks for your respond dilbert.
I caught it up on myself then. :(
I guess I will sit this one out for some time and see if the flood gets less...
If not, I could always try and get a new IP from my ISP.
EDIT: I did some reading on 163.com and I learned it some sort of community website like yahoo and one of it's main services was that anyone can register an email account for free and start sending out emails.
I guess now I know how 163.com could offer such a service! By leeching of mailservers from innocent people! Isn't there a law against such things? :s
Your previous draft for topic is pending
If you continue, your previous draft will be discarded.