One of my server is been almost offline for the last 20 minutes because one of my clients seems to have a virus on their PC which is sending thousands of emails to AOL. I have disabled exim until this problem can be sorted.

Is there any way I can suspend exim for this one account rather than the whole server ?

P.S I don't want to suspend the whole account

Kill the email address that its sending from or firewall off the client's IP.

If there any way to limit number of emails sent per hour through IMAP or SMTP ?

Yes, go to WHM > Tweak Settings > mail

InterSQ, Also clear up your existing que since as soon as you turn exim back on, you would have the same problems.

I know, so I can't really stop this without suspending the account ?

Well you know you could maybe give them a call and let them know about that worm? Simple instructions to clean it.

I've seen ppl with W32.Erkez pumping out 1000's/hour and didn't have a clue.

Just a thought :)

They do know and have done for months :/

I don't know which virus / worm this is but its puming out thousands of emails to AOL. Any ideas ?

Why dont you ask them to install a virus scanner (check avp.com, I think they have a free version as well).

That should stop those mails right away.

I have asked, but can't really force them :/

Then you should restrict them from using your mail server. Don't let a singer client put server stability into question.

Yer, it would be a better idea if they would use their ISP SMTP rather than mine. Doesn't Exim also cover incoming emails aswel though ?

/etc/hosts.deny


exim : ALL : DENY



This deny hosts file will only work if TCP wrappers is compiled into exim. Is this a default option with Cpanel, if how how do ya go about doing it ?