Odd domain usage

[DavidAllen]

One of my domains (on a windows server - plesk) is suddenly giving warnings about bandwidth usage. When i look at the report via plesk it appears that it is mainly smtp traffic. Given that i don't send emails via this account and that there is no email form or similar on the website hosting - does anyone know how this could be happening??

[eUKhost.com]

do you have catchall enabled on this domain ?

If yes then remove it and setup SPF records. also make sure that spamassassin is enabled for this account. seems like spam traffic and spoofing traffic is also counted in your bandwidth usage.

[DavidAllen]

can you get catchall or spamassasin on windows hosting??
also wouldn't spam to the catchall show up as pop traffic not smtp?

[eUK-Martin]

Do you have any form on your website hosting that sends emails..? As there is no other way for your SMTP bandwidth to creep up if you are not sending mails. Also we would like to have the domain name to look further into this, if you can just mail us at support.

[DavidAllen]

no forms at all on the website hosting - in fact no pages at all - domain only recently created
Domain is mily dot co dot uk

[eUKhost.com]

Originally Posted by DavidAllen

also wouldn't spam to the catchall show up as pop traffic not smtp?

Spam to catchall will show as POP3 traffic but catchall allows spoofing which will utilize SMTP traffic due to constant verification messages sent to spammed servers which try to verify existence of email senders.

[DavidAllen]

Well afaik there is no catchall on this domain, and the traffic report shows 0.07Mb of POP traffic and a whopping 30.87Mb of SMTP - so even though your explanation is plausable I don't think it is the explanation in this case

[DPS Computing]

Not to go off topic but firstly is everyone else seeing this?:

Unread Today, 09:08
DavidAllen's Avatar
DavidAllen DavidAllen is offline
Premium Member

Join Date: Jan 2007
Location: Amersham
Posts: 123
Default
Well afaik there is no catchall on this domain, and the traffic report shows 0.07Mb of POP traffic and a whopping 30.87Mb of SMTP - so even though your explanation is plausable I don't think it is the explanation in this case
__________________
David Allen - www.serina.co.uk
Last edited by RSVEcosse : Yesterday at 17:08.
Reply With Quote

How can a post be posted today be edited yesterday and by a completely different user? Is there some bugs in the forum creeping in?

Back on topic, people had done this on one of my domains previously (with another hosting company) and kept maxing out the bandwidth on my account. Turned out they were not only sending emails that looked like it came from me but also they were using images from my webspace in the emails they were sending out - and they were sending out millions so serving images millions of time really sent my bandwidth soreing.

Hope you find the source of the problem soon - I know how frustrating it can be.

Can't you find the source IP in the logs?

[DavidAllen]

I saw that edit by RSVEcosse - it appeared when i created the post - think it's some kind of bug in the forum software

[DPS Computing]

Originally Posted by DavidAllen

I saw that edit by RSVEcosse - it appeared when i created the post - think it's some kind of bug in the forum software

I've noticed a few bugs today that just seemed to have appeared. Some topics are saying they have new posts when they don't - has there been an update recently or something? Or is someone playing about with the forum .

[daledavies]

The forum is goosed, see my post in the Technical Support forum, if you can!

[DPS Computing]

Originally Posted by daledavies

The forum is goosed, see my post in the Technical Support forum, if you can!

Have already looked (and replied) to it. Seems really strange how these problems are happening at the same time.