Welcome to the Cumulus Support forum.

Latest Cumulus MX V4 release 4.0.1 (build 4023) - 16 May 2024

Latest Cumulus MX V3 release 3.28.6 (build 3283) - 21 March 2024

Legacy Cumulus 1 release 1.9.4 (build 1099) - 28 November 2014
(a patch is available for 1.9.4 build 1099 that extends the date range of drop-down menus to 2030)

Download the Software (Cumulus MX / Cumulus 1 and other related items) from the Wiki

Server may go down

General news concerning announcements of new releases, forum outages etc.
Post Reply
User avatar
Cumulus Author
Posts: 26701
Joined: Mon 02 Jun 2008 6:49 pm
Weather Station: None
Operating System: None
Location: Vienne, France

Server may go down

Post by steve »

I am being accused by Hetzner, who provide the dedicated server that I use for this web site and all of the web sites that I host for Cumulus users, of sending spam emails. Or rather, that this server is sending them. They have received spam reports citing this server's IP address as the originator.

I have checked mail logs, including the PHP mail logs, and can find no spam there. One example of the spam emails contains this in the headers:

X-PHP-Originating-Script: 72992:gospelers.php

Some of you may know what this means. It means that a user with ID 72992 sent the message using the PHP script gospelers.php. I do not have a user with ID 72992, nor is there a file called gospelers.php on the server anywhere.

I do not seem to be able to convince Hetzner that the emails are not coming from this server. Somehow, the IP address is apparently being spoofed.

Hetzner say that the server will be blocked in 4 days if the emails do not stop. As I cannot stop the emails, as they are not coming from this server, it seems that the server may actually be blocked in 4 days time.

This means that the Cumulus forum will not be available, nor will any of the web sites that I host for Cumulus users. I apologise for this, but there is apparently nothing I can do.
Post Reply