Search Our Database

Introduction

In DirectAdmin, email accounts may be automatically blocked by the BlockCracking plugin if they are suspected of sending spam or if they exceed sending limits. This automated mechanism is meant to protect the server’s IP reputation and prevent the blacklisting of outgoing mail servers. When this occurs, users may notice that their email accounts are marked as “Blocked” in the “Sent” column of the Email Accounts interface, despite appearing as “Not Suspended” under the “Suspended” column.

This situation typically arises in shared hosting environments, such as when compromised scripts, unauthorized SMTP usage, or poorly secured web forms generate bulk or spam emails. The block prevents further sending activity until the issue is manually reviewed and addressed by the server administrator.

This guide explains how to unblock email accounts like those shown in the DirectAdmin UI and provides steps to prevent future blocks, ensuring reliable and secure mail delivery.

Prerequisites

• DirectAdmin with root or admin-level access
• SSH access to the server
• Exim mail server in use (default for DirectAdmin)
• Email account(s) marked as “Blocked” in the “Sent” column
• Access to log files: /var/log/exim/mainlog, /var/log/exim/rejectlog

Step-by-step Guide

Step 1: Identify the Blocked Accounts

• From your DirectAdmin panel, navigate to:

E-Mail Accounts → Domain: yourdomain.com

• Check the “Sent” column for any entries marked as Blocked.

Step 2: Change the Password of the Blocked Account

• Next to the blocked email, click Change Password / Quota.
• Set a new, strong password and click Save.

Once updated, DirectAdmin will automatically trigger BlockCracking to remove the block.

Step 3: Confirm the Block Has Been Removed

• Refresh the Email Accounts page and verify the “Sent” column no longer shows Blocked.
• Email sending should now be restored.

Step 4: (Optional) Check Logs for Abnormal Activity

For recurring issues, log into the server and review Exim logs:

grep user@yourdomain.com /var/log/exim/mainlog

Optional: Disable BlockCracking via CustomBuild

If disabling BlockCracking completely is preferred (not recommended unless absolutely necessary), use the following method through CustomBuild:

Step 1: Edit options.conf to Disable BlockCracking

1. Access the server via SSH as the root user.

2. Open the options.conf file using your preferred text editor. For example:

   vi /usr/local/directadmin/custombuild/options.conf

3. Locate the line that starts with block_cracking=. Change its value to no:

   block_cracking=no

4. Save the file and exit ( ESC, then type :wq if using vi or vim).

Step 2: Rebuild Exim Configuration Without BlockCracking

After disabling BlockCracking in options.conf, rebuild Exim’s configuration to apply the change:

cd /usr/local/directadmin/custombuild 
./build exim_conf

Conclusion

When an email account in DirectAdmin is marked as “Blocked” in the “Sent” column, it typically indicates that the BlockCracking system has prevented outbound mail due to spam detection or rate limits. This guide detailed how to safely remove the block, scan for malicious activity, and review mail logs for unusual behavior. These steps help restore email functionality while preserving server integrity and reputation.

Should you have any inquiries about the guidelines, please feel free to open a ticket through your portal account or contact us at support@ipserverone.com. We’ll be happy to assist you further.