Still sending autoreplies although osTicket is deleted

c6985120

Hi all,

A few days ago I deleted osTicket from my subdomain and decided to install another open source ticket system. The proiblem is that osTicket is still sending autoresponds as if it's still installed. I've deleted all the osTicket files and the database!?! What else can I do to make it stop?

bernardflach

This is impossible if all is deleted. Perhaps you should check your mailbox/exchange?

c6985120

I know it should be impossible but it's happening! and it has mee totally confused.

c6985120

I've deleted the whole mailbox and recreated it on my host. Still same.

c6985120

Anyone that can shed a light on this really strange issue? I have just checked again and the db has been removed, the files has been removed. The mailbox has been deleted and recreated. Anything else I can try?

c6985120

To undestand how crazy this is. I've changed the mailbox password and I've just got an email to inform me that osTicket can't fetch email???? What the hell is going on?

osTicket is having trouble fetching emails from the following mail account:

User: support@xxxxx.xxx
Host: support.xxxxx.xxx
Error: Can not authenticate to IMAP server: [AUTHENTICATIONFAILED] Authentication failed.

6 consecutive errors. Maximum of 5 allowed

This could be connection issues related to the mail server. Next delayed login attempt in aprox. 10 minutes

bernardflach

c6985120 perhaps you are running somewhere on your server or network another instance you forgot? Check mail logging and trace back the sending server. This is not an osticket issue.

c6985120

There is no other osTicket instance on my server.

c6985120

I have checked my server again and again and again. There is nothing left from osTicket wherever I look.

Below are the headers of the email being sent.

Message-ID <BTCMorH-851tG-AAAAAAAAAAAAAAAAP6G0/zMi-alerts@support.domain.com>
Date Sat, 02 Nov 2019 20:38:03 +0000
From "osTicket Alerts" <alerts@support.domain.com>
To info@domain.com
Subject Mail Fetch Failure Alert
Authentication-Results mx.zohomail.com; dkim=pass; spf=pass (zoho.com: domain of support.domain.com designates xxx.xxx.xxx.168 as permitted sender) smtp.mailfrom=alerts@support.domain.com
Received from domain by cloud.hostingCompany.com with local (Exim 4.92) (envelope-from <alerts@support.domain.com>) id 1iR09r-00E8wT-G6 for info@domain.com; Sat, 02 Nov 2019 22:38:03 +0200
Return-Path <alerts@support.domain.com>

c6985120

So far, I have deleted the subdomain, the mailbox and change it's password, deleted the database being used by OSTicket, delete the files for OSTicket. What else can I do to trace these emails? or stop them?

ntozier

Did you restart your webserver service?

Because otherwise what you describe doesn't sound possible.