How To Control Outgoing Spam Mails From The Server

[jegavelan]

Hi every one

Is there any possible good solution to stop or control the spam mails been sent of the server and to catch up the spammers ?


With Regards

[PlatinumServerM]

You can use suphp to add extra tracking to the headers, you can enable extended logging in exim, you can install a sendmail logger, etc. These all will help track spam much easier.

[ChrisFirth]

Originally Posted by jegavelan

Is there any possible good solution to stop or control the spam mails been sent of the server and to catch up the spammers ?

We find that a combination of the following helps:

1) Sign up for feedback loops, such as the AOL, Comcast and oad Runner feedback loops will really help finding when someone is actually sending spam.
2) Sign up for SNDS from Windows Live, and check often.
3) Set a maximum number of emails that can be sent out in 24 hours. If someone does spam, you can look in the Exim mail logs for any domains that have exceeded this.
4) If you do get reports of spam, check for any CGI scripts running (the most common cause we have found for spam is a user with a trojan on their computer, which allows a spammer to upload a dark mailer cgi script).

[Kent Brockman]

You also can install the CSF firewall. One of its alert features includes reporting of accounts sending high amounts of emails, and tracking which script is sending that spam for you to block it.

[mwaraitch]

Originally Posted by ChrisFirth

We find that a combination of the following helps:

3) Set a maximum number of emails that can be sent out in 24 hours. If someone does spam, you can look in the Exim mail logs for any domains that have exceeded this.

How to we set it.

[fcaillau]

Originally Posted by Kent Brockman

You also can install the CSF firewall. One of its alert features includes reporting of accounts sending high amounts of emails, and tracking which script is sending that spam for you to block it.

How could I perform that? I am on FedoraCore4 (I know...) and some spammers are apparently using my server as a zombie to send lot of emails. Any suggestion on how to check the server for trojans, etc... and on how to track the source of the problem greatly appreciated!