+ Reply to Thread
Results 1 to 3 of 3

Thread: 1.5 million emails with variable IP addresses - delete 127.0.0.1?

  1. #1
    Junior Member
    Join Date
    Jun 2015
    Posts
    14

    1.5 million emails with variable IP addresses - delete 127.0.0.1?

    I had a flood of emails that started this past weekend to an account. The account received 1.5 million emails. Funny thing is - it was a test account. The emails were coming from random IP addresses and all were addressed to either Yahoo or Gmail. I ended up deleting the account and the emails. I noticed that in the retry directory, there were several hundred thousand emails that were trying to be delivered. Following is an example...


    MsgID: 201809040036253650
    LocalSender: ted.anderson@mydomain.com
    SenderMailbox: <ted@mydomain.com>
    From: <ted@mydomain.com>
    To: <somebody1@yahoo.com>
    To: <somebody2@yahoo.com>
    To: <somebody3@yahoo.com>
    Received: from [127.0.0.1] ([187.84.146.6])
    by ns6.mydomain.com (CI Server v3.8) with ASMTP id 201809040036253650;
    Tue, 04 Sep 2018 00:36:25 -0500
    Date: Tue, 4 Sep 2018 07:36:21 +0200


    I believe these were trying to be delivered because 127.0.0.1 was spoofed.



    Question... is it okay to delete 127.0.0.1 from Security/Trusted IPs & Hosts?

  2. #2
    Junior Member
    Join Date
    Jun 2015
    Posts
    14
    Does anyone look at this forum? I tried removing the 127.0.0.1 for the "allow relaying" and it appears to work okay except now users using the Web Client cannot send emails. The log shows they are sending from 127.0.0.1. I have around 10 domains all bound to specific public IP addresses. Is there anything in the Web Client I could change to get this to work without having to use 127.0.0.1?

  3. #3
    Junior Member
    Join Date
    Jun 2012
    Posts
    26
    Hi!


    127.0.0.1 should not be removed. Was the account ted.anderson just hacked? Does mydomain.com have a SPF-record?

+ Reply to Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts