Ok someone is sending spam through my server

[trysb]

OK someone is sending spam through my server and i don't know how they are doing it ... and i want it to stop .. i have gotten 4500 messages bounced back so far ..

How do i stop it ..

cPanel.net Support Ticket Number:

[Website Rob]

And you have done what, so far?

cPanel.net Support Ticket Number:

[promak]

Server Setup > Tweak Settings > The maximum each domain can send out per hour (0 is unlimited): set it like 100~200

First this is just limit send out email from server for each domain, you need to know which ip and which domain is send out email ,

Email > Mail Delivery Stats > See which domain first!

and if you found that this is your customer account send out , block him and send him email . If you found is other ip , send to their isp let them block this personal to black list also go to www.spews.org check is that your ip is not in the list.

cPanel.net Support Ticket Number:

[trysb]

ok .. I have already set the number of e-mail each domain can send is 100 per hour .. but he is still getting by it somehow .... other than that i have not done much more .. I did check the box off that says prvent the user nobody from sending mail ...

How do i block a IP address? If i find his out? Is there anything else i can do ..

THanks
Brian

cPanel.net Support Ticket Number:

[infinityws]

Have you removed the formmail.pl script?

Find out which domain is spamming and suspend that domain.

cPanel.net Support Ticket Number:

[fuzzie]

I have the same issue and I have taken the same steps.

Limited the numbe rof messages to 100.
Back when the formmail issue had started, I took WebsiteRob's advice and disabled these scripts.

I am getting tons of bounce messages.

cPanel.net Support Ticket Number:

[trakwebster]

I get a message or two per week, which are bounces of spam. They show one of my domains as the sender, and so aol (the recipient of the spam) is bouncing them back to me.

However, the emails are being sent from china, and not through my server. The spammer has just picked some domain names that I own to be the forged 'sender'.

Could this be your situation as well?

cPanel.net Support Ticket Number: