Results 1 to 10 of 10
Thread: SPAM problem
-
11-03-2009, 01:36 PM #1Web Hosting Master
- Join Date
- Nov 2003
- Location
- Online
- Posts
- 1,217
SPAM problem
1- its third time my ip black listed. I don't know how but someone ejject some php script and spam using it. Spam by nobody user. How I can get ride on it?
2- Also there are huge amount of mails in mail queue, even i disable catch all email option month back, so how I can get ride on incoming spam also.
-
11-03-2009, 01:45 PM #2Junior Guru
- Join Date
- Jun 2009
- Location
- Kochi,India
- Posts
- 179
-
11-03-2009, 01:53 PM #3Web Hosting Master
- Join Date
- Nov 2003
- Location
- Online
- Posts
- 1,217
how I can check this mailserver, i think its exim.
-
11-03-2009, 02:33 PM #4Junior Guru
- Join Date
- Jun 2009
- Location
- Kochi,India
- Posts
- 179
If you are using a cpanel/WHM server then it will be exim by default.
Enable Mailheaders by running /scripts/easyapache script and after that check the mail header using
exim -Mvh <message id>
From that you will able to find the source of spam.
-
11-03-2009, 05:19 PM #5Newbie
- Join Date
- Oct 2009
- Location
- India
- Posts
- 23
You can check for spammers using the command,
root@server[~]#cat /var/log/exim_mainlog|grep "exceeded the max emails per" > spammers.log; cat spammers.log |cut -d: -f4|awk '{print $2}'|sort -n|uniq -c
It will list the spamming domain names along the number of mails send.
-
11-03-2009, 06:00 PM #6Junior Guru
- Join Date
- Oct 2009
- Posts
- 238
-
11-03-2009, 11:30 PM #7Web Hosting Master
- Join Date
- Nov 2003
- Location
- Online
- Posts
- 1,217
yes its cpanel
-
11-04-2009, 12:41 AM #8Web Hosting Guru
- Join Date
- May 2008
- Posts
- 340
Check the following,
1. Size of the email server queue,
exim -bpc
exim -bp | exiqsumm -c > /root/exim-queue.txtTwitter : http://twitter.com/eth1networks
Contact Us : support[at]eth1.in
-
11-04-2009, 11:30 AM #9Web Hosting Master
- Join Date
- Oct 2009
- Posts
- 1,063
If you are using exim then in WHM there is option Tweak Setting -> Prevent the user "nobody" from sending out mail to remote addresses (PHP and CGI scripts generally run as nobody if you are not using PHPSuexec and Suexec respectively.
Shared Hosting | Reseller Hosting | VPS Hosting | Dedicated Servers
KeserHosting.Com
-
11-05-2009, 10:02 AM #10Web Hosting Master
- Join Date
- Nov 2003
- Location
- Online
- Posts
- 1,217
well when i use suphp it stop to sent mails through forms also, many of my clients use php contact form.
Similar Threads
-
Is this SPAM problem?
By robotwink in forum Hosting Security and TechnologyReplies: 1Last Post: 11-01-2009, 09:01 AM -
Spam Problem - Need someone to fix
By Staminet in forum Employment / Job OffersReplies: 2Last Post: 12-05-2006, 02:52 PM -
Spam Problem
By Serverplan in forum Hosting Security and TechnologyReplies: 10Last Post: 09-21-2005, 12:19 PM -
Spam Problem (Please help me)
By Ogeres in forum Dedicated ServerReplies: 4Last Post: 08-27-2005, 08:21 PM