Help! Mail Hijacked!

[Hines]

My mail has been hijacked! (I figure this is more of a security issue; hence, this forum and not email forum).

How do I know my email has been hijacked?

I "bcc" all emails to my hotmail account.

I am getting emails now that are: to somebodyNOTme@hotmail.com and from somebodyNOTme@hotmail.com.

I am a complete novice at SSH so I hope answers to my problem can avoid this.

What should I do?!?!

Info: I use Horde. I have a virtuozzo VPS server so I think no firewall can be installed.

[Infopro]

In your cPanel account, find the Set Default Address section. What are your settings here? This should prove helpful here I think:
Why you should use :fail:

AFAIK, CSF will work just fine on a VPS.

[Hines]

In "Set Default Address" I simply have it forwarded to my hotmail address.

Re: CFS....is that--or something like it--available in WHM if I do an Apache rebuild?

And where in cPanel do I set options for :fail?

[Infopro]

In "Set Default Address" I simply have it forwarded to my hotmail address.

That's why you're getting all that email.

Re: CFS....is that--or something like it--available in WHM if I do an Apache rebuild?

The link above has instructions for installing CSF. You do not need to recompile Apache, no.

And where in cPanel do I set options for :fail?

You were in the correct location for this. You do not set forwarders here, you set those in the Forwarders section of your cPanel.

HTH.