Results 1 to 7 of 7
  1. #1

    our smtp being use by spammers. how to stop?

    Hello everyone,

    I have deciated windows 2008 server and from last 2 days there is some thing which is using our smtp server to send spam its like we get thousand of spam emails qued in our outbound que, although our security is really high, such as smtp authtenication (open relay) and other options are already enable and we ran anti virus scan too but nothing found.

    I wonder if there is anyone else out there who face such problem and how did you stop?

    Please help.

    Thank You
    Last edited by triple; 11-03-2009 at 06:38 PM.

  2. #2
    Join Date
    Jul 2008
    Location
    Manitoba, Canada
    Posts
    122
    You should first try to confirm if it's a script being ran on the server or if it's being sent through one of your users email accounts. If you've configured your email server correctly it shouldn't be too difficult to track it down by reading the headers. If you see nothing of evidence in there start looking at your logs.
    Scott M. | RDS//Hosting
    Business Web Hosting Solutions Since 2004
    Personal, Semi-Dedicated Business, DirectAdmin Reseller Accounts
    http://www.rdshosting.net | PH. 1.877.442.7674

  3. #3
    You can check for spammers using the command,

    [email protected][~]#cat /var/log/exim_mainlog|grep "exceeded the max emails per" > spammers.log; cat spammers.log |cut -d: -f4|awk '{print $2}'|sort -n|uniq -c

    It will list the spamming domain names along the number of mails send.

  4. #4
    Join Date
    Aug 2006
    Posts
    850
    Quote Originally Posted by polonuxseo1 View Post
    You can check for spammers using the command,

    [email protected][~]#cat /var/log/exim_mainlog|grep "exceeded the max emails per" > spammers.log; cat spammers.log |cut -d: -f4|awk '{print $2}'|sort -n|uniq -c

    It will list the spamming domain names along the number of mails send.

    No linux, in windows 2008 server
    WebSitePanel / Hosting Controller / Smartermail / Installation / Configuration / Troubleshooting / Migrations
    Windows Server Management / Security / Hardening
    I speak English and Spanish

  5. #5
    Join Date
    Apr 2005
    Location
    Cochin
    Posts
    2,446
    Confirm if you are using mailenable server
    Sam
    Supportlobby.com - Expertise in Windows/Linux server support, IaaS and PaaS Management
    Spiralbean.com - Custom Software Development
    Email: exec @ activelobby.net | Skype: unni_active

  6. #6
    Yes we're using Mailenable Pro server with with Plesk 9.2. We tried to analyze the log but couldn't figure out the cause.

  7. #7
    Join Date
    Dec 2002
    Location
    The Shadows
    Posts
    2,913
    I would maybe enable authentication even for localhost, sometimes it is disabled to allow web scripts to work more easily. But if the problem is a script, this will stop it. However, it will also make your customers angry when they stop getting emails for their scripts...
    Dan Sheppard ~ Freelance whatever

Similar Threads

  1. How to stop spammers - help?
    By Zaggs in forum Hosting Security and Technology
    Replies: 5
    Last Post: 05-01-2007, 10:01 AM
  2. How to stop spammers!!!
    By captainmk in forum Hosting Security and Technology
    Replies: 4
    Last Post: 09-21-2006, 10:08 AM
  3. Stop PHP nobody Spammers
    By webhostbeginner in forum Hosting Security and Technology
    Replies: 10
    Last Post: 10-08-2005, 07:07 AM
  4. Spammers using my SMTP...
    By HostsRus in forum Hosting Security and Technology
    Replies: 11
    Last Post: 09-02-2004, 08:16 AM
  5. spammers using my SMTP?
    By DenRomano in forum Hosting Security and Technology
    Replies: 9
    Last Post: 03-26-2003, 09:03 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •