mail is not sending from wordpress

[johnny09]

Hello,

after update I dont get any mails from my sites, registration, login and so on emails.

CWPpro version: 0.9.8.529

Is this ok?
https://imgur.com/a/mR937mO

[johnny09]

Any one? Is there a fix?

[changlee]

Hello,
First choose one website. Is it WordPress? If yes, what setup do you have? Does it use PHP Mail or SMTP?

[johnny09]

Few days ago before update the mail was sending, by default I think PHP wordpress uses, tried with 5 sites, all the same. There is something in the update that has changed...

[changlee]

OK, choose ONE website and check what is it using...? PHP Mail?

Have you set up and WP SMTP plugin?

[johnny09]

Why should I configure my sites to SMTP? Many plugins, forms use

https://developer.wordpress.org/reference/functions/wp_mail/

My previous IS provider was blocking some ports, but that was years ago and changed IS to non-blocking one.

It must be the cwp update, any admin could maybe say something....

[changlee]

If you do use PRO, then send them a private ticket for that...

[studio4host]

cwp is not blocking anything and also updates don't affect your current mail server setup

you need to check the mailserver logs, you can find log path info for postfix on the wiki
http://wiki.centos-webpanel.com/service-log-paths

[johnny09]

from 22 JUL till today

Jul 25 16:37:15 host postfix/smtpd[15430]: warning:
unknown[181.214.206.189]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 25 16:37:15 host postfix/smtpd[15430]: disconnect from unknown[181.214.206.189] Jul 25 16:37:18 host postfix/smtpd[19456]: connect from unknown[181.214.206.14] Jul 25 16:37:25 host postfix/smtpd[19456]: warning:
unknown[181.214.206.14]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 25 16:37:25 host postfix/smtpd[19456]: disconnect from unknown[181.214.206.14] Jul 25 16:37:30 host postfix/anvil[22312]: statistics: max connection rate 25/3600s for (smtp:181.214.206.14) at Jul 25 16:37:18 Jul 25 16:37:30 host postfix/anvil[22312]: statistics: max connection count 1 for (smtp:181.214.206.189) at Jul 25 16:27:30 Jul 25 16:37:30 host postfix/anvil[22312]: statistics: max message rate 6/3600s for (smtp:118.113.58.67) at Jul 25 16:37:12 Jul 25 16:37:30 host postfix/anvil[22312]: statistics: max cache size 18 at Jul 25 16:32:23 Jul 25 16:37:31 host postfix/smtpd[14437]: warning: 181.214.206.189:
hostname edc49.areovrt.de verification failed: Name or service not known Jul 25 16:37:31 host postfix/smtpd[14437]: connect from unknown[181.214.206.189] Jul 25 16:37:37 host postfix/smtpd[14437]: warning:
unknown[181.214.206.189]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 25 16:37:38 host postfix/smtpd[14437]: disconnect from unknown[181.214.206.189] Jul 25 16:37:46 host postfix/smtpd[15430]: connect from unknown[181.214.206.14] Jul 25 16:37:55 host postfix/smtpd[15430]: warning:
unknown[181.214.206.14]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 25 16:37:55 host postfix/smtpd[15430]: disconnect from unknown[181.214.206.14] Jul 25 16:37:59 host postfix/smtpd[19456]: warning: 181.214.206.189:
hostname edc49.areovrt.de verification failed: Name or service not known Jul 25 16:37:59 host postfix/smtpd[19456]: connect from unknown[181.214.206.189] Jul 25 16:37:59 host postfix/smtpd[14437]: connect from unknown[185.234.218.85] Jul 25 16:38:02 host postfix/smtpd[14437]: warning:
unknown[185.234.218.85]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 25 16:38:02 host postfix/smtpd[14437]: lost connection after AUTH from unknown[185.234.218.85] Jul 25 16:38:02 host postfix/smtpd[14437]: disconnect from unknown[185.234.218.85] Jul 25 16:38:10 host postfix/smtpd[19456]: warning:
unknown[181.214.206.189]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 25 16:38:10 host postfix/smtpd[19456]: disconnect from unknown[181.214.206.189] Jul 25 16:38:13 host postfix/smtpd[15430]: connect from unknown[181.214.206.14] Jul 25 16:38:22 host postfix/smtpd[15430]: warning:
unknown[181.214.206.14]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 25 16:38:22 host postfix/smtpd[15430]: disconnect from unknown[181.214.206.14]

What dose that mean?

[johnny09]

Is there a way to block those IP's? I added in my router blacklist, added in cwp Firewall blacklist, they still appear... some one is trying to knock in.

Fail2Ban? Or some rules should be created in IP tables? Any advice on this I would appreciate..

[johnny09]

From wordpress backend I see that there was an email sent, but the mail never came

https://imgur.com/a/mzCYofQ

[johnny09]

Done-php version was old, switched and everything is ok