The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

blocking ip's producing spam

Discussion in 'General Discussion' started by julzk, Oct 19, 2004.

  1. julzk

    julzk Member

    Joined:
    Oct 8, 2004
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    1
    Stopping spam from mail queue! plz help!

    Just two small questions. What commands do I have to type to (A) Block an IP that is sending spam from the server? and (B) Just for referrence, how to remove a blocked IP that I may of added to the table?

    What must I type to add say the following ip: 200.121.166.204


    And on another note, how do you read the mail staistics generated by WHM? For example the below:

    1 (aarhus) [200.121.166.204] adelemegawatt@netzero.net
    => mx3.mail.yahoo.com [64.156.215.7] dihnen@yahoo.com
    1 (aarhus) [200.121.166.204] adjustablyacidic@adelphia.net
    => mx8.hanmail.net [211.43.197.198] dik4pierkiss@hanmail.net
    1 (aarhus) [200.121.166.204] adulationbluffs@att.net
    => mx1.hotmail.com [64.4.50.99] diheadland@hotmail.com
    1 (aarhus) [200.121.166.204] asiapragmatic@pacbell.net
    => mx3.hotmail.com [65.54.167.5] diira@hotmail.com
    1 (aarhus) [200.121.166.204] barclaycorroborate@adelphia.net
    => mx8.hanmail.net [211.43.197.14] dijer@hanmail.net
    1 (aarhus) [200.121.166.204] bogotahostilities@comcast.net
    => mx1.hotmail.com [65.54.252.99] dikawamoto@hotmail.com
    1 (aarhus) [200.121.166.204] brainchildrenbaltic@sbcglobal.net
    => mx1.mail.yahoo.com [67.28.113.10] diibo_design@yahoo.com
    1 (aarhus) [200.121.166.204] costhusky@cox.net
    => flmx-2.tampabay.rr.com [65.32.1.49] digna71@cfl.rr.com

    I can only think that the wording in the bracket is some kind of header or dictionary word, followed by the first IP address being the sender's IP address, followed by the email address of the sender from the ip address. then the => which is going to the mail server located at the second ip address to the second email address. Is this correct? And the number at the very start being the number of emails going to that address, 1 meaning one email going there. Is this correct?

    I am having issues with spam lately and am trying to put a stop to it. And like the example displayed above. I presume one offender is from that 200.121.166.204 IP address. So if I was to block that IP address, they couldn't send this spam through the mail server I presume.


    And on another subject of the matter, I am having issues with a lot of mail in the queue. I found this thread: http://forums.cpanel.net/showthread.php?t=22749&highlight=blocking and followed the instructions given in it, but after doing it and saving exim I am having difficulty full stop in sending and receiving mail, it's jsut not working. So I removed the items I added into the exim.conf via whm and saved it then restarted exim and still the same problem. :(
     
    #1 julzk, Oct 19, 2004
    Last edited: Oct 19, 2004
Loading...

Share This Page