Unusual email sent in Moodle (reports/insights) - moodle

I have Moodle server configured to password reset using a Gmail account. Recently I had to migrate all the Moodle websites to a new CentOS 7 server (The Postfix was active with default configurations). Suddenly all the teachers were received thousands of emails subjected "Students at risk in 'Course Name'" with the body,
>Hi "Teacher name",
>A number of students in "Course Name" have never accessed the course.
>
>View insight (this is a link to 'https://my.moodle.url/report/insights/insights.php?modelid=4&contextid=14517')
One Teacher informed me this is happened due to Insights module and he deactivated the same module. I also deactivated the Postfix. Then everything was fine for about a week.
Today from another Moodle website in the same server has sent an email to another teacher subjected 'Upcoming courses have no teachers or students' and the body,
Hi 'Teacher name',
Courses with start dates in the next week have been
identified as having no teacher or student enrolments.
View insight (Linked to
https://my.moodle.url/report/insights/insights.php?modelid=2&contextid=1)
Reading this in an email? Download the mobile app and receive
notifications on your mobile device. (Linked to
'https://download.moodle.org/mobile?version=2019111803.02&lang=en&iosappid=633359593&androidappid=com.moodle.moodlemobile')
Please kindly support me to solve this issue. Is my server/ Moodle websites hacked?
Server configurations:
CentOS 7 (Linux my.host.name 3.10.0-1127.8.2.el7.x86_64 #1 SMP Tue
May 12 16:57:42 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux)
Nginx 1.16.1
php 7.2.31
Moodle 3.8
Thank you,

This is due to a setting that must be still activated in Moodle adminitration. You can search for the key-word enableanalytics and turn this setting off.
The server may not send any of those emails after that.
The documentation of this tool can be found here : https://docs.moodle.org/38/en/Analytics_settings

Related

Client settings need to be updated to Microsoft Exchange. For more info see https://x.co/client

I am using my email and password to send email using python script. But I am not able to send mail since past couple of weeks.
I debugged and found error.
Msg: b"Your message wasn't delivered because your client settings need to be updated to Microsoft Exchange. For more info see https://x.co/client"
on windows machine using outlook I also updated my email to Microsoft Exchange but still my problem is not resolved.
Can someone guide me on this?
Note: From outlook web and app email send/receive both are working fine. problem is only with script smtp.
Main Purpose is to use same details with flask-mail in flask project.
MAIL_SERVER="smtpout.secureserver.net"
MAIL_PORT=465
MAIL_USE_SSL=1
MAIL_USERNAME="______________"
MAIL_PASSWORD="______________"

Cannot register with any organization. Registering a system in RHEL

subscription-manager register --username="USERNAME"
--password="PASSWORD"
when i run this command i'm getting error:- Cannot register with any organization.
I was facing this issue. But the problem got solved. Until you accept the terms & conditions AND you have active subscription 1, you can't register. I have solved this problem by adding company name as N/A and job title as retired. After 2 days of creating the account, active subscription became 1 and I was able to register my system.
https://access.redhat.com/products/red-hat-enterprise-linux/evaluation
go to this link and try to login for 30 days evaluation.

My Dovecot and Postfix server on Ubuntu not working

I recently started renting a Ubuntu 18.04 VPS from DigitalOcean. The intent was to run a cheaper email system instead of alternatives like GSuite and Microsoft Business for me and a fellow developer, and split the costs. I've setup very basic email servers before, but in this case, since we both have our own domains and users, using virtual domains/virtual users is a must.
I followed a tutorial here, but my server won't let me connect. When I try viewing logs in any sort of way, everything seems fine. Entering the command tail -f /var/log/syslog | grep dovecot, then monitoring the results as I try and log in only produces this:
Sep 29 03:11:16 MEMail dovecot: imap-login: Login: user=<sysadmin#meproduction.org>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=28028, secured, session=<lUrg7Pl2ls9/AAAB>
Sep 29 03:11:16 MEMail dovecot: imap(sysadmin#meproduction.org): Logged out in=44 out=870
That's all the logs I was able to find. /var/logs/mail.log was empty, and postfix doesn't seem to show anything what-so-ever. When I try and login via SquirrelMail, CloudFlare ( my NameServer ) shows a page saying a 502, but only if I login to a valid account. Entering an invalid user just says that my login is incorrect, as you'd expect.
What logs am I missing, or maybe steps the tutorial messed up that you see? I would like to get the email system running ASAP, because I don't want to setup anything else until it's done, and some things require it ( like adding a spam filter, and S/MIME, and adding all those extra DNS and SSL features for security ).
I did find an answer. Apparently the tutorial I followed must've been formatted incorrectly, or done something wrong. After reverting my VPS, and following a different tutorial, I was able to set it up. If anybody else is trying to setup something like I did, follow this tutorial from DigitalOcean. I recommend looking firstly for tutorials from them, as they're usually well made and work well.

Surge in new users on my website, are they fake?

Sorry if this is the wrong exchange.
Ok I have had my DotNetNuke website up for awhile now but no man users signing up. After speaking to one users it seems that my skin was a little poor in terms of logging in/registering as rather than the usual 2 buttons my skin just had a '+'
Anyway I changed my skin so I now have a clear 'Login' and 'Register' button. Over 24 hours or so I suddenly had a load of new users (40+). Checking my email inbox I seem to have quite a few Delivery errors for most of these users with errors like so.
Failed Recipient: #gmail.com
Reason: Remote host said: 550 5.1.1 The email account that you tried to reach does not exist. Please try
5.1.1 double-checking the recipient's email address for typos or
5.1.1 unnecessary spaces. Learn more at
5.1.1 http://support.google.com/mail/bin/answer.py?answer=6596 ay8si26335412wib.67 - gsmtp
or
Failed Recipient: #live.de
Reason: Remote host said: 550 Requested action not taken: mailbox unavailable
and another
Failed Recipient: #gawab.com
Reason: Failed to connect to the recipients mail server. No DNS information was found for the 'gawab.com' domain.
this one says fake account???
Failed Recipient: #yahoo.com
Reason: Remote host said: 554 delivery error: dd This user doesn't have a yahoo.com account (#yahoo.com) [0] - mta1153.mail.gq1.yahoo.com
Obviously I have removed the start of the email address for posting here.
So my question is what is the cause of these errors?
Is it DNN and some settings?
Is it my mail server? - using SmarterMail
Are they just fake accounts?
If they are fake accounts is there anyway I can better prevent them?
There has been a recent exploit by spammers who figured out how to script automated registrations on DNN websites. I was getting 20-40 of these per day on my DNN sites also. There is a way to address this. Follow the steps described in the following articles:
http://www.dnnsoftware.com/community-blog/cid/154984/spammer-registrations
OR
http://www.dnnhero.com/Premium/Tutorial/tabid/259/ArticleID/300/2-Strategies-on-how-to-deal-with-DNN-Registration-Spam-Part-1-3.aspx

How can I use Mandrill App as system message mailer on Parallels Panel?

Currently I have my CentOS system set up with Parallels Panel and have my mailing system working nicely. But I'd prefer to have my system messages to be mailed using Mandrill App (MailChimp guys).
I have it working now with a kind of a mixed setup. Simple, though working. But now I get an error in my mail logs saying the following:
Jan 4 10:41:11 shinjuku postfix/smtp[29469]: certificate verification failed for smtp.mandrillapp.com[46.137.69.113]:25: untrusted issuer /C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/emailAddress=premium-server#thawte.com`
After this I've tried configuring the smtp_tls_CApath and smtpd_tls_CApath to point to /etc/ssl/certs, but still no luck on this part.
Does someone have an idea on how I can get this working to have ALL system messages to be sent using Mandrill, instead of built-in config?
Mark, for CentOS try this for your CAPath/CAfile
smtp_tls_CAfile = /etc/ssl/certs/ca-bundle.crt