==== Required information ====
- iRedMail version: 0.8.6
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Linux/BSD distribution name and version: Ubuntu 12.04
- Related log if you're reporting an issue:
====
Hi Zhang,
One of my users are receiving a lot of these emails
From: MAILER-DAEMON@mail.mydomain.ph (Mail Delivery System)
Date: March 8, 2014 4:03:54 PM GMT+08:00
To: user@mydomain.com.ph
Subject: Undelivered Mail Returned to SenderThis is the mail system at host mail.mydomain.ph.
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.For further assistance, please send mail to postmaster.
If you do so, please include this problem report. You can
delete your own text from the attached returned message.The mail system
<courtneyanne1991@yahoo.com>: host mta6.am0.yahoodns.net[98.138.112.37] said:
554 Message not allowed - [PH01] Email not accepted for policy reasons.
Please visit http://postmaster.yahoo.com/errors/postmaster-27.html [120]
(in reply to end of DATA command)
Reporting-MTA: dns; mail.mydomain.ph
X-Postfix-Queue-ID: 18DDA81109
X-Postfix-Sender: rfc822; user@mydomain.com.ph
Arrival-Date: Sat, 8 Mar 2014 16:03:51 +0800 (PHT)Final-Recipient: rfc822; courtneyanne1991@yahoo.com
Original-Recipient: rfc822;courtneyanne1991@yahoo.com
Action: failed
Status: 5.0.0
Remote-MTA: dns; mta6.am0.yahoodns.net
Diagnostic-Code: smtp; 554 Message not allowed - [PH01] Email not accepted for
policy reasons. Please visit
http://postmaster.yahoo.com/errors/postmaster-27.html [120]From: "Virginia Theater" <vc.theater@yahoo.com>
Date: March 8, 2014 4:02:30 PM GMT+08:00
To: "Eric Cook" <agenthatchet@gmail.com>, "Stephen Cram" <stephenpaul56@verizon.net>, "Sandra Cramer" <idiwit2002@msn.com>, "dacooper" <dacooper@wcnet.org>, "Tony Laura Damon" <LDAMON@woh.rr.com>, "Tim Yvonne Dennis" <tadennis@wcnet.org>, "Mark Detamore" <markdetamore1@yahoo.com>, "dlnaus" <dlnaus@wcnet.org>, "Rita Driver" <radriver2000@aol.com>, "Rita and Tim driver" <rdriver@woh.rr.com>, "joyce Durliat" <durliat@juno.com>, "Vince Eatherton" <vince1776@wmconnect.com>, "Tiffani Eberflus" <mrsebs37@aol.com>, "Donna Eckman" <deckman@woh.rr.com>, "Laura Eisel" <laurakay43@wmconnect.com>, "Howard Elliott" <theboyes@aol.com>, "Ernsbergers" <ernsberg@netscape.net>, "Kali Findley" <kaliforniabungalow@yahoo.com>, "Courtney Franz" <courtneyanne1991@yahoo.com>, "Bonnie G" <dagchewy@yahoo.com>
Subject: Virginia Theater
Reply-To: vc.theater@yahoo.comhttp://delarbol.com/rjok/foxx_news.php
Virginia Theater
From what I have noticed, all emails are almost the same with the link on the last line that changes domain but still foxx_news.php on its end is consistent.
So I thought this user is sending email spam, but he said he's not sending anything. He is also using the mail app in Mac.
Any thoughts on how to stop this?