IMPORTANT! The server may go down soon - possibly permanently. Please read the latest post in Announcements and News

I strongly advise all users using my server for their web site to make alternative arrangements.

Outgoing mail is disabled because of the malware on the server. No new forum registrations are currently possible, and mail to the forum administrator will not work.

Please read the posts in the Announcements section about the current status of Cumulus development now that I have retired

Please read this post before posting

Latest Cumulus release v1.9.4 (build 1099) - Nov 28 2014
Latest Cumulus MX release - v3.0.0 build 3043 Jan 20 2017. See this post for download

Server may go down

General news concerning Sandaysoft and its products, announcements of new releases etc.
User avatar
steve
Cumulus Author
Posts: 26700
Joined: Mon Jun 02, 2008 6:49 pm
Weather Station: None
Operating System: None
Location: Vienne, France
Contact:

Server may go down

Postby steve » Fri Oct 05, 2018 7:30 pm

I am being accused by Hetzner, who provide the dedicated server that I use for this web site and all of the web sites that I host for Cumulus users, of sending spam emails. Or rather, that this server is sending them. They have received spam reports citing this server's IP address as the originator.

I have checked mail logs, including the PHP mail logs, and can find no spam there. One example of the spam emails contains this in the headers:

X-PHP-Originating-Script: 72992:gospelers.php

Some of you may know what this means. It means that a user with ID 72992 sent the message using the PHP script gospelers.php. I do not have a user with ID 72992, nor is there a file called gospelers.php on the server anywhere.

I do not seem to be able to convince Hetzner that the emails are not coming from this server. Somehow, the IP address is apparently being spoofed.

Hetzner say that the server will be blocked in 4 days if the emails do not stop. As I cannot stop the emails, as they are not coming from this server, it seems that the server may actually be blocked in 4 days time.

This means that the Cumulus forum will not be available, nor will any of the web sites that I host for Cumulus users. I apologise for this, but there is apparently nothing I can do.
Steve
-----
Hosting available for Cumulus web sites. See http://sandaysoft.com/forum/viewtopic.php?f=2&t=11876

Please read the posts in the Announcements section about the current status of Cumulus development since I have retired from my day job

Return to “Announcements and News”

Who is online

Users browsing this forum: No registered users and 4 guests