Proxmox Mail Gateway under attack, sending emails wildly out with foreign domains

Hugo Almeida

Member
Jul 15, 2019
31
0
6
28
Good Morning,

I am experiencing some kind of attack on my Proxmox Mail Gateway, an internal email account of mine is wildly sending emails with strange domains and I can't identify what it is.

It seems to me it's like a robot that makes this kind of attack, it affected two of my email accounts.

Please if anyone can help me with this I will be very grateful.
 

tom

Proxmox Staff Member
Staff member
Aug 29, 2006
14,040
485
103
Close these two email account on your email server.
 

hata_ph

Member
Nov 13, 2019
120
21
18
40
Pls show log...
Is the email send out from your email server?
Could it be the email account being hack with weak password?
 

Hugo Almeida

Member
Jul 15, 2019
31
0
6
28
Already disabled as accounts on my mail server, I ended all sessions and instructed users to change a password, requiring a certain level of complexity.

Thank you for your attention.
 

sashavl

New Member
Oct 15, 2019
16
3
3
31
Maybe it is virus on some computer sending directly through PMG. Check "trusted network" setting, and put there only your mail server ip with /32 mask.
 
  • Like
Reactions: hata_ph

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE and Proxmox Mail Gateway. We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get your own in 60 seconds.

Buy now!