Mailenable Pro 3.x and Plesk

[magicspam]

Please verify that MagicSpam is not just installed, but is also enabled. Which rules do you have enabled and which are disabled?

Would you be able to post some examples of the messages that got through from the MagicSpam logs? We should be able to look at the entries and determine why they were able to get through.

Is the MailEnable-filter you're using a content filter? MagicSpam does not do content filtering, so you may want to consider using a content filter to improve your spam protection.

As for the login hanging, https://127.0.0.1.62 isn't a valid IP address. Have you tried https://127.0.0.1:62?

[jonca]

Yes Magicspam is enabled, well it was the last time i was logged into it

Rules enabled I have no idea, I can't get passed the login screen, I enter the user and password and it just sits and does nothing

Please explain non valid ip comment
https://127.0.0.1.6244 is the url i use, it brings up the magicspam login screen and a non valid ssl certificate. Then it does nothing.

Sample spam captured my mailenable filters. Mailenable filters check content, headers, spf status, dkim,
SMTP headerjunk DELETE,STOP_PROCESSING [SMTP:emukyco1576@comcast.net] 71.233.8.211 CRITERIA=HEADERS_CONTAIN, DATA=<MF-W>*VIAGRA*</MF-W> Good day alia, 75% off for you club make
05/04/10 00:54:42 Executed 8BA3F66F279F4EDCA4DD076E075BE1CF.MAI SMTP headerjunk DELETE,STOP_PROCESSING [SMTP:iaqyejebo8613@airtelbroadband.in] 122.162.38.226 CRITERIA=HEADERS_CONTAIN, DATA=<MF-W>*VIAGRA*</MF-W> Sale Reminder for melnychukbjatq! 78% off all week Xalu
05/04/10 00:54:47 Executed 0E8E3E659CF84D0096DB7FE4B86C3286.MAI SMTP headerjunk DELETE,STOP_PROCESSING [SMTP:cahitupo4093@routit.net] 213.144.224.48 CRITERIA=HEADERS_CONTAIN, DATA=<MF-W>*VIAGRA*</MF-W> Good day mcurtis, 75% off for you United unravel came have
05/04/10 00:55:37 Executed EDFD4023CD2545C9A01C45F783B334D2.MAI SMTP headerjunk DELETE,STOP_PROCESSING [SMTP:pepivacaiu4781@chello.nl] 62.108.5.75 CRITERIA=HEADERS_CONTAIN, DATA=<MF-W>*VIAGRA*</MF-W> Good day r.meers, 75% off for you minutiae task helmsman network the

05/04/2010 00:23 Executed 6A5BD8252864404B9F8FEDD22BBC4E28.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:kum_margorieiy@ksb.com] 84.31.30.73 CRITERIA=SUBJECT, DATA=<MF-W>Codeine*</MF-W> Codeine/Phentermin/Hydrocodone/Vicodin 7.5/750mg $3.90/pill, NoPrescription, Shipping via FEDEX/UPS/DHL xqo vwq
05/04/2010 00:26 Executed 77E55491D459484581F8A21CD325464D.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:uraxypo9876@ufon.cz] 195.92.193.207 CRITERIA=BODY, DATA=<MF-W>viagra</MF-W> Discounts for you, rolgae! Save at least 70% see their
05/04/2010 00:37 Executed 7214B9839670401D9A27041C3CB03AA8.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:beloveds9@joenachbaur.com] 62.87.150.199 CRITERIA=BODY, DATA=<MF-W>pills</MF-W> =?koi8-r?B?Rm9yZ2V0IGFib3V0IGZha2UgY29tcGFuaWVzLCB3ZSBhcmUgc2VuZGlu?=
05/04/2010 00:41 Executed 7ECA051B6EDB48ACAC2861B952D37D29.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:gayletlatoriaor@kleinestaarman.com] 61.17.250.92 CRITERIA=BODY, DATA=<MF-W>cheap drugs</MF-W> Canadian 0nlinePharmacy. The Lowest Pharmacy offers, we accept Visa, MasterCard, AmEx, Diners, JCB Cards and eCheck. ecar o6
05/04/2010 00:41 Executed 91FBEB8074BB442B98EF455AA3C7E970.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:metrosi94@cranagh.com] 193.252.182.70 CRITERIA=BODY, DATA=<MF-W>pills</MF-W> Visit our website to order a free test bottle of enlargement pills to widen your device. Ever wanted to be a real man? Yes? Than order a free test bottle of our pills.
05/04/2010 00:44 Executed 98594A02467F4C2CAFD3B90EC6D0CC0D.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:inatalyaly@agora.bungi.com] 116.14.156.125 CRITERIA=SUBJECT, DATA=<MF-W>Codeine*</MF-W> Codeine/Phentermin/Hydrocodone/Vicodin 7.5/750mg $3.90/pill, NoPrescription, Shipping via FEDEX/UPS/DHL kljz 7l
05/04/2010 00:45 Executed 63EEC0D77C7D4E74B109099862FFBF04.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:imelodijy@atspace.com] 95.96.60.227 CRITERIA=BODY, DATA=<MF-W>*penis*</MF-W> En1argerPenis 3" in 6 Weeks, see myPenis pictures as proof. pbgh 3al
05/04/2010 00:45 Executed 8F0FA74DE92540079E55D1D27C332046.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:fyzahud5434@evc.net] 83.141.161.226 CRITERIA=BODY, DATA=<MF-W>viagra</MF-W> Discounts for you, wwkbgl! Save at least 70% feet of Europe Although people
05/04/2010 00:46 Executed 062EBB66BDB94B2A826DBF672F24B0D8.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:meyerem4@eagle-pt.com] 114.25.152.205 CRITERIA=BODY, DATA=<MF-W>pills</MF-W> Right now you need to visit our website and take your free test bottle of pills. Hurry up and order your free test bottle of pills while we still have them in warehouse.
05/04/2010 00:59 Executed 6F7F32650D2843B099BFB275C855C4E1.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:majordomo@alalam-tower.com] 122.161.96.50 CRITERIA=BODY, DATA=<MF-W>watches</MF-W> Amazon.com Deal of the Day
05/04/2010 01:07 Executed B580D0DD2675482F91FF04642C401694.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:successively@letauction.com] 90.152.48.103 CRITERIA=BODY, DATA=<MF-W>replica</MF-W> Find out the pluses of buying replica watches.
05/04/2010 01:09 Executed 98A536EF52134C4DBF3D0881671F0403.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:jrust82@accomline.com] 178.95.90.54 CRITERIA=BODY, DATA=<MF-W>watches</MF-W> Amazon.com Deal of the Day
05/04/2010 01:11 Executed 72559D0CF22E49619B823F9ACC8959C7.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:Anita.Schwarzowcr@alshamil.net.ae] 217.164.112.63 CRITERIA=BODY, DATA=<MF-W>*Casino*</MF-W> =?windows-1252?B?R2UtaWwtaGV0IGF1ZiBLbm9wZmRydWNr?=
05/04/2010 01:32 Executed 0AFEBD09C8094AB5932EE150DD29867B.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:gambledvn@coachingmedical.com] 189.123.54.130 CRITERIA=BODY, DATA=<MF-W>watches</MF-W> Our watches are at low price but high quality. With Submariner SS model boring time passes faster.
05/04/2010 01:47 Executed 6BBEC696F86E455C91612A893366CB43.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:shedydk@jardel.com] 71.196.29.248 CRITERIA=BODY, DATA=<MF-W>*penis*</MF-W> En1argerPenis 3" in 6 Weeks, see myPenis pictures as proof. rbhic ya3
05/04/2010 01:49 Executed DCC666E101344FC2A765FB21E7DACD30.MAI SMTP instant delete STOP_PROCESSING [SMTP:erection.doctor@barefootbubbas.com] 213.131.73.239 CRITERIA=SUBJECT, DATA=<MF-W>Penis</MF-W> Increase in penis length by 1-3 inches
05/04/2010 01:49 Executed 22D494454D814788B7793715E578DE01.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:erection.doctor@barefootbubbas.com] 127.0.0.1 CRITERIA=SUBJECT, DATA=<MF-W>Penis</MF-W> Increase in penis length by 1-3 inches
05/04/2010 01:50 Executed 14E89D47FB66471F964A163E870CB6A5.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:ujovasaso6813@romtelecom.net] 92.86.1.14 CRITERIA=BODY, DATA=<MF-W>viagra</MF-W> Discounts for you, jonvowles! Save at least 70% re
05/04/2010 01:50 Executed F35F00A3803B4AEDA182767D5BBF5A6C.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:diversions2@jaguar-moon.com] 122.173.141.7 CRITERIA=BODY, DATA=<MF-W>watches</MF-W> A watch decorates you better than shyness.
05/04/2010 01:53 Executed 35282022C5794C2FA268108BED219E8D.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:ngrx@almaden.ibm.com] 195.211.110.138 CRITERIA=BODY, DATA=<MF-W>watches</MF-W> Amazon.com Deal of the Day
05/04/2010 01:53 Executed 81A9E632DCF547C089F9E64E8BCC1936.MAI SMTP instant delete DELETE,STOP_PROCESSING [SMTP:ngrx@almaden.ibm.com] 195.211.110.138 CRITERIA=BODY, DATA=<MF-W>watches</MF-W> Amazon.com Deal of the Day

[magicspam]

Would you please forward c:\magicspam\logs\error.log to debug [at] magicspam [dot] com? We would like to examine that log file and determine what the issue is.

As for the messages that aren't being caught, a lot of them should be caught by the check_dynamic_reverse_dns rule. Once you are able to regain access to the MagicSpam control panel, we recommend you enable that rule. You should see a further reduction in the amount of spam once that rule is enabled.

As for the invalid IP comment, IPv4 IP addresses can only have four octets, so the IP you provided (127.0.0.1.6244) is not a valid IP address. The .6244 should be :6244, to indicate the port to connect to.

[magicspam]

Were you able to get this issue resolved? We have not heard anything more from you.

[magicspam]

Some additional pieces of information that may help us assist you further (should you need it) are your Windows version and whether it's 32 or 64-bit.

[jonca]

Hi

No its not resolves, I emailed you the logs over a week ago and had no reply.

Its a 32Bit system and no activity shows in the Logs, I think this is the wrong version as it has no interaction at all with my email

[jonca]

To: 'debug-at-magicspam-dot-com'
Subject: Mailenable Pro 3.x and Plesk

As per your request

Error log contains so little data I am not convinced this version of MagicSpam is operating on the server correctly
Re: Mailenable Pro 3.x and Plesk
by magicspam on Wed May 05, 2010 9:24 am
Would you please forward c:\magicspam\logs\error.log to debug [at] magicspam [dot] com? We would like to examine that log file and determine what the issue is.


[Sun May 02 06:32:50 2010] [notice] Apache/2.2.11 (Win32) mod_ssl/2.2.11 OpenSSL/0.9.8l configured -- resuming normal operations
[Sun May 02 06:32:50 2010] [notice] Server built: Dec 10 2008 00:10:06
[Sun May 02 06:32:50 2010] [notice] Parent: Created child process 39776
[Sun May 02 06:32:52 2010] [notice] Child 39776: Child process is running
[Sun May 02 06:32:52 2010] [notice] Child 39776: Acquired the start mutex.
[Sun May 02 06:32:52 2010] [notice] Child 39776: Starting 64 worker threads.
[Sun May 02 06:32:52 2010] [notice] Child 39776: Starting thread to listen on port 6244.
[Sun May 02 15:45:21 2010] [warn] pid file C:/magicspam/log/httpd.pid overwritten -- Unclean shutdown of previous Apache run?
[Sun May 02 15:45:24 2010] [notice] Apache/2.2.11 (Win32) mod_ssl/2.2.11 OpenSSL/0.9.8l configured -- resuming normal operations
[Sun May 02 15:45:24 2010] [notice] Server built: Dec 10 2008 00:10:06
[Sun May 02 15:45:24 2010] [notice] Parent: Created child process 34020
[Sun May 02 15:45:29 2010] [notice] Child 34020: Child process is running
[Sun May 02 15:45:29 2010] [notice] Child 34020: Acquired the start mutex.
[Sun May 02 15:45:29 2010] [notice] Child 34020: Starting 64 worker threads.
[Sun May 02 15:45:29 2010] [notice] Child 34020: Starting thread to listen on port 6244.
[Mon May 03 04:52:09 2010] [warn] pid file C:/magicspam/log/httpd.pid overwritten -- Unclean shutdown of previous Apache run?
[Mon May 03 04:52:14 2010] [notice] Apache/2.2.11 (Win32) mod_ssl/2.2.11 OpenSSL/0.9.8l configured -- resuming normal operations
[Mon May 03 04:52:14 2010] [notice] Server built: Dec 10 2008 00:10:06
[Mon May 03 04:52:14 2010] [notice] Parent: Created child process 27932
[Mon May 03 04:52:22 2010] [notice] Child 27932: Child process is running
[Mon May 03 04:52:22 2010] [notice] Child 27932: Acquired the start mutex.
[Mon May 03 04:52:22 2010] [notice] Child 27932: Starting 64 worker threads.
[Mon May 03 04:52:22 2010] [notice] Child 27932: Starting thread to listen on port 6244.
[Thu May 06 14:13:24 2010] [notice] Parent: Received shutdown signal -- Shutting down the server.
[Thu May 06 14:13:24 2010] [notice] Child 27932: Exit event signaled. Child process is ending.
[Thu May 06 14:13:25 2010] [notice] Child 27932: Released the start mutex
[Thu May 06 14:13:54 2010] [notice] Parent: Forcing termination of child process 416
[Thu May 06 14:15:34 2010] [notice] Apache/2.2.11 (Win32) mod_ssl/2.2.11 OpenSSL/0.9.8l configured -- resuming normal operations
[Thu May 06 14:15:34 2010] [notice] Server built: Dec 10 2008 00:10:06
[Thu May 06 14:15:34 2010] [notice] Parent: Created child process 32532
[Thu May 06 14:15:38 2010] [notice] Child 32532: Child process is running
[Thu May 06 14:15:38 2010] [notice] Child 32532: Acquired the start mutex.
[Thu May 06 14:15:38 2010] [notice] Child 32532: Starting 64 worker threads.
[Thu May 06 14:15:38 2010] [notice] Child 32532: Starting thread to listen on port 6244.


Thanks
Jonca

[magicspam]

We have not received an email from you, but thank you for posting the logs here.

Could you please confirm which web browser you're using to try to access the control panel and which version the web browser is? If you are using IE8, you may want to try another browser (such as Firefox).

[jonca]

I'm using IE6 on the server and IE8 to access the server

I dont have an issue reaching the panel now, EuroVPS reinstalled the package

Only problem is getting it to do anything

All default options are on

Thanks

[magicspam]

EuroVPS reinstalled the package

Only problem is getting it to do anything

Could you please clarify what you mean by those two statements? Which package did EuroVPS reinstall and what is it not doing?