Being blamed for sending spam but I'm not. Can someone help with log entries?

openminds

Registered
Jul 14, 2014
4
0
1
Terryville, Connecticut, United States
cPanel Access Level
Reseller Owner
Hi all,

My reseller host keeps blaming one of my accounts for sending spam who I know for a fact is not, at least not intentionally. I have done malware and virus scans on his only computer that connects via email, I have changed passwords, had my host scan the file system for malware, etc but it keeps happening. I am not a pro at this level and could use a little help. They sent me a log with multiples of the same entry. Can someone please help me understand what exactly what these entries mean?

Code:
2015-06-14 23:00:44 H=notmydomain1.eu [1.1.1.1]:56590 F=<[email protected]> temporarily rejected RCPT <[email protected]>: Could not complete sender verify callout

2015-06-14 23:02:03 H=notmydomain2.eu [2.2.2.2]:58783 F=<[email protected]> temporarily rejected RCPT <[email protected]>: Could not complete sender verify callout
 
Last edited by a moderator:

openminds

Registered
Jul 14, 2014
4
0
1
Terryville, Connecticut, United States
cPanel Access Level
Reseller Owner
Here is another entry. There is a multitude of these, all having an email address in them that does not exist on my server, and they are all different:

Code:
2015-06-22 10:13:07 H=static-ip-209-126-xxx-xx.inaddr.ip-pool.com (somedomain.us) [209.126.xxx.xx]:41321 F=<[EMAIL][email protected][/EMAIL]> temporarily rejected RCPT <[EMAIL][email protected][/EMAIL]>: Could not complete sender verify callout
Isn't this an incoming email log entry?
 
Last edited by a moderator:

Infopro

Well-Known Member
May 20, 2003
17,113
511
613
Pennsylvania
cPanel Access Level
Root Administrator
Twitter
Do you have this enabled in WHM?

Home »Service Configuration »Exim Configuration Manager, Mail tab:

Sender Verification Callouts
Use callouts to verify the existence of email senders. Exim will connect to the mail exchanger for a given address to verify it exists before accepting mail from it.
Disabled is preferred.

In your cPanel, Mail section, Default Address, where do you have all unrouted email for your domains going?

"Discard the email while your server processes it by SMTP time with an error message." is preferred.