Go Back   cPanel Forums > cPanel® and WHM® (for Linux® and FreeBSD® Servers) > cPanel and WHM Discussions

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 08-19-2009, 12:06 PM
Registered User
 
Join Date: Apr 2005
Posts: 37
jonyzinho is on a distinguished road
Exclamation Help - Many SPAM- lfd on server5.my-server.net: LOCALHOSTRELAY Alert for 127.0.0.1

Hi,

I need some help with urgency, because I have one client with send thousand's of mail SPAM.

I receive by mail, this report's:

==================================================

Time: Wed Aug 19 17:00:46 2009 +0100
Type: LOCALHOSTRELAY, localhost - 127.0.0.1
Count: 101 emails relayed
Blocked: No

Sample of the first 10 emails:

2009-08-19 16:55:51 1MdnVv-0000mU-SE <= kevsharp@btinternet.com H=localhost (my-server.net) [127.0.0.1] P=smtp S=1179 id=01CA20E5.17E414F1@my-server.net T="Why spend more?"
2009-08-19 16:55:51 1MdnVv-0000mh-Si <= frankallred@yahoo.com H=localhost (my-server.net) [127.0.0.1] P=smtp S=1095 id=01CA20E5.485B1CAE@my-server.net T="Ancient secret for perfect intimate life."
2009-08-19 16:55:51 1MdnVv-0000mg-T5 <= frankallred@yahoo.com H=localhost (my-server.net) [127.0.0.1] P=smtp S=1218 id=01CA20E5.2961136C@my-server.net T="New collection of Ed med discounts"

==================================================

You may help me please, to stop this thousand's of SPAM mails ?

Regards,

Joao

PS - sorry with my english.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 08-28-2009, 10:06 AM
Registered User
 
Join Date: Feb 2004
Posts: 101
electron33
I got that too just a few minutes ago with exactly the same count:

Time: Fri Aug 28 14:56:10 2009 +0100
Type: LOCALHOSTRELAY, localhost - 127.0.0.1
Count: 101 emails relayed
Blocked: No
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 08-28-2009, 01:04 PM
Infopro's Avatar
Forum Moderator
 
Join Date: May 2003
Location: Pennsylvania
Posts: 3,498
Infopro is on a distinguished road
Lightbulb

Those emails are from LFD, a part of CSF.

mailman localhostrelay alert for 127.0.0.1 - ConfigServer Scripts Forum
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 08-28-2009, 04:32 PM
Registered User
 
Join Date: Feb 2004
Posts: 101
electron33
Thanks. Are these emails actually being sent out, or they're just 'false positives'?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 08-28-2009, 06:21 PM
Infopro's Avatar
Forum Moderator
 
Join Date: May 2003
Location: Pennsylvania
Posts: 3,498
Infopro is on a distinguished road
Lightbulb

Quote:
Originally Posted by electron33 View Post
Thanks. Are these emails actually being sent out, or they're just 'false positives'?
They are not false positives. You really would have better luck on the CSF forums with chirpy the developer of CSF.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
lfd: High 5 minute load average alert - 37.96 partsace cPanel and WHM Discussions 5 04-14-2008 11:14 AM
lfd alert for high server load. Who's the culprit? schwim cPanel and WHM Discussions 4 09-03-2007 09:53 PM
lfd: LOCALRELAY Alert Tymsah Developer Discussions 4 08-09-2007 11:51 AM
lfd: High 5 minute load average alert - 427.32 Giorgi cPanel and WHM Discussions 4 05-06-2007 07:56 PM
lfd: High 5 minute load average alert chad101 cPanel Newbies 6 05-05-2007 04:55 AM


All times are GMT -5. The time now is 09:27 AM.


Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
© cPanel Inc