1b.app
Link copied -

Spam is coming from our server. As a result, we were blocked by smtp hosting, after which the crm system does not work correctly for us

The technicians replied that "You have activity from the php side.
php 30647 cen........neb 6u IPv4 5...........4 0t0 TCP m..........r.ru:58596->mail-smtp .stable.qloud-b.yandex.net:smtp(SYN_SENT)
It is necessary to eliminate it." That is, mail is being sent by a php script. It all started at night at 4.55 Moscow time. At night, you install the system crm update. Could this somehow affect? Can you check what's wrong?
Original question is available on version: ru

Answers:

more precisely, they stopped working out business processes, for example, the audit in this process admin/customorder/testovie/224590/edit/#done does not pass. The number of exhibited and the number of passed must these fields be filled.
05.02.2021, 15:06
Original comment available on version: ru

Everything was working normally yesterday. There were no problems.
05.02.2021, 15:09
Original comment available on version: ru

Good afternoon. Your box sends letters via smtp to Yandex mail, as it is registered in the settings of your mailers. Why should boxing "eliminate" this activity?
05.02.2021, 15:17
Original comment available on version: ru

Isn't your php script responsible for sending letters via smtp via Yandex mail?
05.02.2021, 15:24
Original comment available on version: ru

and how is it connected that the hoster disables smtp for us on the server and after that the audit business process is not worked out? Sending emails is not involved in this business process!
05.02.2021, 15:35
Original comment available on version: ru

There is currently no spam activity. the host has unblocked. But the audit does not pass as before!
05.02.2021, 15:37
Original comment available on version: ru

I have no idea what an audit is and what should work there. Can you describe the problem more precisely? I go here, click here - it shows an error, etc.
05.02.2021, 15:41
Original comment available on version: ru

A day later, we figured out what the problem was with automatic blocking of smtp by hosting on our server. The reason lies precisely in your "Integration with email". It was checked as follows: after unlocking, literally after 5-10 minutes, automatic blocking worked again until all mailbox integrations from crm were removed. After that, the automatic blocking did not work. At the same time, the full functionality of business processes immediately earned. But when the "Integration with email" parser was disabled, we no longer received letters, and most importantly, applications from the site in the form of letters that are tied to business processes (application processing by managers), which limits work in crm.
1. Please deal with this problem, why is smtp blocked on the server due to integration with e-mail, thereby showing that spam is coming from the server? It all started at night at 4.55 Moscow time, I suspect that it was after incorrect updates of the crm system that automatically happens at night.
2. How are the smtp service, which is responsible for sending letters from the server, connected with the execution of business processes, in which the work of receiving and sending letters is not involved in any way?!
06.02.2021, 20:17
Original comment available on version: ru

1. The system DOES NOT SEND ANY SPAM without your knowledge. Do you have proofs in the form of letters that you did not send personally and the system "wanted" to send them itself?
2. Sending letters and actions once a minute cost the same crown.
08.02.2021, 10:53
Original comment available on version: ru

1. it turns out that yes, the system sends something without our knowledge. I can not say for sure.
2. receiving from the mailbox where requests from the site come is configured once a minute in crm.
Automatic action once an hour is configured as follows:
Export contacts to Google Contacts - 2 pcs
XML Contact Integration (Export)
08.02.2021, 11:04
Original comment available on version: ru

1. "I think that the system is sending something" and "here is a letter that I did not send, but the system sent" are different things. The first is an assumption that may have nothing to do with reality. The second is a fact that can be verified
08.02.2021, 11:06
Original comment available on version: ru

I asked for help, found the reason, which is related to "Integration with e-mail". As soon as I deleted all the mailboxes with "Integration with e-mail", the automatic blocking stopped. Help me figure out why this is happening?
08.02.2021, 12:25
Original comment available on version: ru

Please contact your hosting, let them justify the reason why they block smtp. On what basis do they prohibit sending you any letters?
08.02.2021, 12:31
Original comment available on version: ru

just launched a minute cron, it worked and did not send any letters
08.02.2021, 12:33
Original comment available on version: ru

This is the response from the host:
The monitoring system recorded 354 conns/m the first time and 1964 conns/m the second time (smtp connections per minute) from your server.
Such a volume of traffic was regarded by the system as a mass mailing, then automatic blocking worked.
smtp-block 2021-02-05 09:53:17+0800 2021-02-05 18:13:00+0800 vm make 354 conns/m
smtp-block 2021-02-05 18:13:35+0800 2021-02-05 19:12:04+0800 vm make 1964 conns/m
smtp-block 2021-02-05 19:46:39+0800 2021-02-05 21:33:45+0800 vm make 647 conns/m
smtp-block 2021-02-05 21:37:44+0800 2021-02-05 23:17:18+0800 vm make 654 conns/m
08.02.2021, 14:14
Original comment available on version: ru

Good afternoon.
You currently do not have any email integrations configured in your system.
Judging by the logs, your server sent letters directly, for February 5 (from 17:15 to 23:59:02) there were only 590 attempts.
Letters were sent to test@centrmig.ru and it@centrmig.com.
The server could try to send emails directly only if the SMTP server specified in the integration was unavailable.
To prevent this from happening, you need to enable the setting "Do not send emails from this mail if SMTP is not available".
08.02.2021, 16:44
Original comment available on version: ru

Connected Integration with e-mail again. The server is not automatically blocked by SMTP, but requests are not received now. Responsible for this is the Automatic action once a minute and the business process Applications from the mail
09.02.2021, 11:16
Original comment available on version: ru


Tasun Sergey Vladimirovich
Employee wrote:
Good afternoon.
You currently do not have any email integrations configured in your system.
Judging by the logs, your server sent letters directly, for February 5 (from 17:15 to 23:59:02) there were only 590 attempts.
Letters were sent to test@centrmig.ru and it@centrmig.com.
The server could try to send emails directly only if the SMTP server specified in the integration was unavailable.
To prevent this from happening, you need to enable the setting "Do not send emails from this mail if SMTP is not available".

The attachment shows what kind of letters came to these email addresses. ("Letters were sent to the addresses test@centrmig.ru and it@centrmig.com".) What is this business process that sends these letters to these addresses? Where are these addresses registered in crm?
09.02.2021, 11:44
Original comment available on version: ru

You set up your system, and you ask us what kind of PSU sends letters.
Judging by the picture, these are the statuses of data imports from files.
Perhaps this is an email for technical notices.
09.02.2021, 17:29
Original comment available on version: ru


Companies CenterM Administrator
Client wrote:
Connected Integration with e-mail again. The server is not automatically blocked by SMTP, but requests are not received now. Responsible for this is the Automatic action once a minute and the business process Applications from the mail

Applications from the mail and do not come. Email integration doesn't work.
09.02.2021, 20:36
Original comment available on version: ru

Please help us solve our problem!
10.02.2021, 19:28
Original comment available on version: ru

Good evening.
Your email integration is not configured correctly.
When connecting via IMAP, the server returns an error:
[AUTHENTICATIONFAILED] LOGIN invalid credentials or IMAP is disabled sc=1VdcBDEWuGk1_102131_1-678fcb8b26ad Too many login failures
Your mail is on Yandex, you may not have allowed imap, or an authorization error (login / password is not correct)
SMTP, as I understand it, you did not set it up.
10.02.2021, 23:40
Original comment available on version: ru

thanks, imap was specified in the Yandex mail settings, but the application password was not set. after the done procedure, the letters began to come!
11.02.2021, 15:24
Original comment available on version: ru

Please join the conversation. If you have something to say - please write a comment. You will need a mobile phone and an SMS code for identification to enter. Log in and comment