Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Blocking senders in exim

[joshiee]

I have a spammer spamming from the same e-mail address. How can I get exim to just ignore it and the domain its comming from? Its being relayed through the user 'nobody' and i cant find the script its comming from so I figure step1 will be to kill all outgoing messages as from the domain

[UserUnfriendly.com]

Well, to start, you can turn off sending mail as nobody in WHM->Tweak Settings. That will stop the sending from now. Now, you should check your Exim logs, and watch for bounces, you could also watch your main logs and look for multiple mails being sent out in a row. Either way, watch for the mail id number, and open them up, and see if you can get lucky and he will include information on himself in the mail. Or, if not, search the server for those strings.

[Justin Reel]

This may help: http://www.webhostgear.com/118.html

[UserUnfriendly.com]

Thats a great tutorial. Good way to help find the users sending from nobody.