Potential Bug After Restoring Backup – Mail-in-a-Box Used for Sending Spam

[vele]

Good! if you are not listed, but Outlook as per the first post seems to block you.

Start fresh.
Reserve the public IP. Terminate the instance. Make another clean instance. Reinstall the latest MIAB. Recreate the users.
DO NOT RESTORE BACKUP

Test Outlook and Gmail via telnet. Google test SMTP via telnet.

How to test out the SMTP Server?

Check if you are blocked.

Read here Gmail, Yahoo work but iCloud emails bounces with 503 5.5.1 Error: send HELO/EHLO first (in reply to RCPT TO command) - #3 by vele

Are Outlook and Gmail blocking you.
If yes, delist yourself from Outlook https://sender.office.com/
No need to try to delist from Gmail they will not respond. They have an auto delist according to some AI crap. This is in the bulk sender contact form: Sender Contact Form - Gmail Help

Do not restore the backup yet. Try sending some test messages from the webmail.
Check the logs for symptoms.

I am not really sure how a backup can trigger a malware but it could be possible.

Now if your clean machine is acting OK. Use as backup method the rsync option. No need to restore from duplicity.

Rsync the user-data directory.

Help with upgrade with a special case

Hey Alento, No. We are not using NextCloud, so one less thing to worry about. I’ve noticed that when I unmount the volume that has the user-data directory, I have the user-data directory still there with the default values. I was thinking on copying all files and directories to this original user-data directory, excepting all email files, that way, the backup operation shouldn’t take as long. Do you think this could work? Thanks guys!

See what is going on afterwards.

If you wish to investigate further on the dirty machine you can try something like Tshark a WireShark gui-less app and see what or who is making the network requests and spam. This might be tedious. I am out of other ideas.
Good luck