Results 1 to 6 of 6
  1. #1

    WHM - mail queue manager - lot of spam


    can you help with tracing from where spam is going from the server. i can see spam in mail queue manager and we had ip blacklisted just trying to trace who is doing that which user or is ther a injection somewhere

    please advise

    WHM 11.30.0(build 29)



  2. #2
    Join Date
    Apr 2005
    post the headers ...
    Sam - Expertise in Windows/Linux server support, IaaS and PaaS Management - Custom Software Development
    Email: exec @ | Skype: unni_active

  3. #3
    Join Date
    Dec 2010
    surabaya, indonesia
    chec ur tweak setting
    limit email hourly on ur whm
    Fast Host Online Hosting, Domain, VPS, Dedicated Server
    OpenVZ, Xen, And WIndows VPS

  4. #4
    You can find out through email headers.

  5. #5
    ok so email header:

    mailnull 47 12
    1307976910 0
    -ident mailnull
    -received_protocol local
    -body_linecount 28
    -max_received_linelength 172
    -frozen 1307976913
    [email protected]

    164P Received: from mailnull by with local (Exim 4.69)
    id 1QW8Xm-0002XY-3N
    for [email protected]; Mon, 13 Jun 2011 15:55:10 +0100
    049 X-Failed-Recipients: [email protected]
    029 Auto-Submitted: auto-replied
    070F From: Mail Delivery System <[email protected]>
    032T To: [email protected]
    059 Subject: Mail delivery failed: returning message to sender
    059I Message-Id: <[email protected]>
    038 Date: Mon, 13 Jun 2011 15:55:10 +0100

    sorry but jus hidden our domain with dots

    and the message

    This message was created automatically by mail delivery software.

    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:

    [email protected]
    The mail server could not deliver mail to [email protected]. The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.

    ------ This is a copy of the message, including all the headers. ------

    Return-path: <[email protected]>
    Received: from localhost.localdomain ([]
    by with smtp (Exim 4.69)
    (envelope-from <[email protected]>)
    id 1QW8Xl-0002XW-Uz
    for [email protected]; Mon, 13 Jun 2011 15:55:09 +0100
    Received: (qmail 65369 invoked by uid 58825); 13 Jun 2011 16:38:08 -0000
    Date: 13 Jun 2011 16:38:08 -0000
    Message-ID: <[email protected]>
    From: "Sallie Ferruccio" <[email protected]>
    To: "superdaddye" <[email protected]>
    Subject: Friends become huge with ouvr stimulating tablets
    Mime-Version: 1.0
    Content-Type: text/plain; charset=us-ascii
    Content-Transfer-Encoding: quoted-printable

    New tablets would help you become hugee with youjr Slawatycze
    Seee fulbl range at http=3A=2F=2Ftpaenr=2Euapnezryv=2Ecom=2F



  6. #6
    I think i have resolve the issue by installing csf.

    SMPT_BLOCK and other options helped a lot now i cant see any suspicious emails going out

    and i have manage to delist from baracuda spam db now just hotmail(Microsoft SNDS) left



Similar Threads

  1. WHM - email stuck in Mail Queue Manager
    By time_trapper in forum Hosting Security and Technology
    Replies: 6
    Last Post: 01-12-2010, 10:00 PM
  2. WHM - email stuck in Mail Queue Manager ?
    By time_trapper in forum Hosting Security and Technology
    Replies: 6
    Last Post: 11-14-2009, 07:44 AM
  3. Mail Queue Manager
    By zoomx in forum Hosting Security and Technology
    Replies: 24
    Last Post: 07-03-2008, 12:51 AM
  4. whm, mail queue manager question
    By aqi32 in forum Hosting Security and Technology
    Replies: 3
    Last Post: 10-29-2006, 08:02 AM
  5. Mail Queue Manager
    By 3-rx in forum Hosting Software and Control Panels
    Replies: 2
    Last Post: 08-04-2006, 02:49 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts