Thousands of Spam Emails Coming in

[GabeT]

Hello, I thought I'd make my first post here and ask for some advice on what I can do to stop this crap from coming into my email. For the last month or so I've been getting nothing but spam in one of my email accounts. The address they are being sent to are all fake accounts from my domain siccness.net.

Here are some examples:
email@siccness.net
emailserv7379@siccness.net
e-user5372@siccness.net
ex-smtp@siccness.net
mailingbox@siccness.net
listening@siccness.net
webmaster@siccness.net
XFreeMail@siccness.net
Z-User@siccness.net
webmaster@siccness.net
priv-mail@siccness.net
zfreemailer@siccness.net
MailIn_Box@siccness.net
MailIn_Box3789@siccness.net
ThisAccount@siccness.net
smntp@siccness.net
smntp1272@siccness.net
smntp2046@siccness.net
x_mail-list@siccness.net
Z-Account@siccness.net
XFreeMail5710@siccness.net
aryo@siccness.net

Again, my server only has 2 email accounts
bplease@siccness.net
advertise@siccness.net

Is there any way i can stop this from coming in, maybe even slow it down?

[kris1351]

You should really talk to your host about installing Mailscanner and ClamAV with the Mailscanner frontend.

www.configserver.net

Aside from that you can tighten your spam rules in SpamAssasin in your Cpanel until they move to a better solution. Try making the spam number 5 or 6 instead of the default 8. Also, enable the spam box so they go to the spam box instead of your email client. Just make sure you empty your spam box often or your mailbox will fill up.

[forlinuxsupport]

hi

Make sure your catchall is set to :fail:
so any email NOT addressed to your 2 email addresses will get bounced.
By setting catchall to :fail: you arnt actaully receiveing the email body, so you dont need the mail program to scan them for spam.

Thats the quickest and easiest way, also very economical.

cheers
Andy

[GabeT]

hi

Make sure your catchall is set to :fail:
so any email NOT addressed to your 2 email addresses will get bounced.
By setting catchall to :fail: you arnt actaully receiveing the email body, so you dont need the mail program to scan them for spam.

Thats the quickest and easiest way, also very economical.

cheers
Andy

Funny thing is i have it set to :fail: on the whm side and on the cpanel side under default email address..

[ramprage]

View the mail headers, chances are they're coming from the same source. Firewall the senders IP and if there is a common subject line setup a filter to delete the message.

[abubin]

Funny thing is i have it set to :fail: on the whm side and on the cpanel side under default email address..

Change the one in your cpanel domain to also be :fail:. Since it is set to default email address, it will still be running catchall. That's why those mails are coming in. The :fail: you changed in WHM will only affect new accounts created not existing accounts.

[GabeT]

Change the one in your cpanel domain to also be :fail:. Since it is set to default email address, it will still be running catchall. That's why those mails are coming in. The :fail: you changed in WHM will only affect new accounts created not existing accounts.

Is that set on the cpanel side or the whm side? I dont see where i can set that...

[forlinuxsupport]

cpanel side.. under email / manage

Default address

[GabeT]

cpanel side.. under email / manage

Default address

It has no way for me to edit.


is there a way do enable me to edit it?

[forlinuxsupport]

its on the page brefore that one.. click the [go back] link


look for "default address"

[ctbhost]

i have just had mailscanner installed and my spam has droped dramatically - its doing a fantastic job

[forlinuxsupport]

hahah.. good stuff

Mailscanner really rocks.. really nice way to eliminate spam, and also very configurable.
The best option is still to NOT use catchalls (set defualt address to :fail
Rather setup all the email addresses you need and send them all to one user if you have to. Just stay away from catcalls. eeek !

With mailscanner it still uses cpu time to check the email for spam and then nuke it.

Cheers
Andy

[ctbhost]

i agree on the catchalls - they are a bad idea