Web Hosting Talk







View Full Version : Spammers using my SMTP...


HostsRus
09-01-2004, 05:22 PM
I have noticed lately that my Queue list has been huge... When I view the QMail Queue list with qmHandle I see lots of this:

1406393 (9, R)
Return-path:
From: MAILER-DAEMON@MYDOMAIN.COM
To: info@mymobilephone.com
Subject: failure notice
Date: 1 Sep 2004 19:34:14 -0000
Size: 35897 bytes

By the end of the day I will hundreds of these failure messages. Currently I am just running: './qmHandle -Sfailure' every 5 hours to clear it all out.

I know it's spammers, I viewed a few of the messages...

I also did: telnet relay-test.mail-abuse.org
It said only one got through.... the 'whatever%domain.com'

Basically, I just want some advice on how to stop these people from connecting to my clients mail servers and spamming.

The last thing I want is to get black listed on spam databases.

I am running PLESK7

EOL

Host4SALE900909
09-01-2004, 05:39 PM
Have you attempted to login to your WHM and go to Tweak Security and enable the security in there to fix it?

probonic
09-01-2004, 05:45 PM
Originally posted by Host4SALE900909
Have you attempted to login to your WHM and go to Tweak Security and enable the security in there to fix it? If you read the original post, HostsRus is running Plesk 7.

Host4SALE900909
09-01-2004, 05:59 PM
I did read the post. But, that wasn't there when I posted. If you see he had edited his post.

probonic
09-01-2004, 06:07 PM
Ok fair enough. I believe you ;)

HostsRus
09-01-2004, 06:44 PM
Okay....
Now does anyone have a solution?

:o

wKkaY
09-01-2004, 06:54 PM
does plesk include that qmail patch that rejects mails to unknown recipients during the SMTP phase (as opposed to accepting it, then generating a bounce email to the sender) ?

HostsRus
09-01-2004, 07:00 PM
ummm.... I dunno,
I hate PLESK... do you have the url for that patch? I will just go around PLESK and install it.

Kanagaraj
09-02-2004, 02:55 AM
I Also need the patch

Kanagaraj

viGeek
09-02-2004, 05:33 AM
do a: ps aux | grep perl

datums
09-02-2004, 08:12 AM
Are these actual email sent out your server? Or bounce backs from someone spoofing the from address to be you ?

Kanagaraj
09-02-2004, 08:16 AM
bounce backs from someone spoofing the from address our email address