The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Help for fix spam nobody

Discussion in 'General Discussion' started by deksite, Aug 15, 2006.

  1. deksite

    deksite Member

    Joined:
    Oct 4, 2005
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    in my serve send much spam user "nobody" pls help for fix problem :(

    Loading.....
    The mail spool has more than 1000 messages!


    2006-08-15 15:14:02 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1GD3QP-0001Pp-HU
    2006-08-15 15:14:02 1GD3QP-0001Q8-O4 <= nobody@fenix.deksite.com.br U=nobody P=local S=2715 T="Veja o cart\343o que mandaram para voce!" from <nobody@fenix.deksite.com.br> for tuty_taty@hotmail.com Equipe@ocarteiro.com eEquipe@ocarteiro.com
    2006-08-15 15:14:02 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1GD3QP-0001Q8-O4
    2006-08-15 15:14:02 cwd=/home/fenix/public_html 3 args: /usr/sbin/sendmail -t -i
    2006-08-15 15:14:02 1GD3QO-0001Ow-L6 ** equipe@ocarteiro.com <Equipe@ocarteiro.com> F=<nobody@fenix.deksite.com.br> P=<nobody@fenix.deksite.com.br> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<Equipe@ocarteiro.com>: host cart2.ocarteiro.com [200.179.57.200]: 550 5.1.1 <Equipe@ocarteiro.com>... User unknown
    2006-08-15 15:14:02 1GD3QO-0001Ow-L6 ** eequipe@ocarteiro.com <eEquipe@ocarteiro.com> F=<nobody@fenix.deksite.com.br> P=<nobody@fenix.deksite.com.br> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<eEquipe@ocarteiro.com>: host cart2.ocarteiro.com [200.179.57.200]: 550 5.1.1 <eEquipe@ocarteiro.com>... User unknown
    2006-08-15 15:14:02 cwd=/var/spool/exim 7 args: /usr/sbin/exim -t -oem -oi -f <> -E1GD3QO-0001Ow-L6
    2006-08-15 15:14:02 1GD3QP-0001Pp-HU == nobody@fenix.deksite.com.br R=localuser T=local_delivery defer (13): Permission denied: cannot create //mail
    2006-08-15 15:14:02 1GD3QP-0001PN-12 ** equipe@ocarteiro.com <Equipe@ocarteiro.com> F=<nobody@fenix.deksite.com.br> P=<nobody@fenix.deksite.com.br> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<Equipe@ocarteiro.com>: host cart2.ocarteiro.com [200.179.57.200]: 550 5.1.1 <Equipe@ocarteiro.com>... User unknown
    2006-08-15 15:14:02 1GD3QP-0001PN-12 ** eequipe@ocarteiro.com <eEquipe@ocarteiro.com> F=<nobody@fenix.deksite.com.br> P=<nobody@fenix.deksite.com.br> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<eEquipe@ocarteiro.com>: host cart2.ocarteiro.com [200.179.57.200]: 550 5.1.1 <eEquipe@ocarteiro.com>... User unknown




    Displaying Message ID 1GD3fO-0003zR-9i

    Main >> Email >> Mail Queue Manager
    Delete Message | Deliver Message Now | Return to Mail Queue 1GD3fO-0003zR-9i-H
    mailnull 47 12
    <>
    1155666570 0
    -ident mailnull
    -received_protocol local
    -body_linecount 89
    -allow_unqualified_recipient
    -allow_unqualified_sender
    -localerror
    XX
    1
    nobody@fenix.deksite.com.br

    158P Received: from mailnull by fenix.deksite.com.br with local (Exim 4.52)
    id 1GD3fO-0003zR-9i
    for nobody@fenix.deksite.com.br; Tue, 15 Aug 2006 15:29:30 -0300
    093 X-Failed-Recipients: jayminho_b@hotmail.com,
    Equipe@ocarteiro.com,
    eEquipe@ocarteiro.com
    031 Auto-Submitted: auto-generated
    064F From: Mail Delivery System <Mailer-Daemon@fenix.deksite.com.br>
    032T To: nobody@fenix.deksite.com.br
    059 Subject: Mail delivery failed: returning message to sender
    053I Message-Id: <E1GD3fO-0003zR-9i@fenix.deksite.com.br>
    038 Date: Tue, 15 Aug 2006 15:29:30 -0300


    1GD3fO-0003zR-9i-D
    This message was created automatically by mail delivery software.

    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:

    jayminho_b@hotmail.com
    unrouteable mail domain "hotmail.com"
    Equipe@ocarteiro.com
    unrouteable mail domain "ocarteiro.com"
    eEquipe@ocarteiro.com
    unrouteable mail domain "ocarteiro.com"

    ------ This is a copy of the message, including all the headers. ------

    Return-path: <nobody@fenix.deksite.com.br>
    Received: from nobody by fenix.deksite.com.br with local (Exim 4.52)
    id 1GD3fO-0003zP-7Y; Tue, 15 Aug 2006 15:29:30 -0300
    To: jayminho_b@hotmail.com
    Subject: Voce recebeu um cartão de O Carteiro.com!
    MIME-Version: 1.0
    Content-type: text/html; charset=iso-8859-1
    From: <Equipe@ocarteiro.com>
    Cc: Equipe@ocarteiro.com
    Message-Id: <E1GD3fO-0003zP-7Y@fenix.deksite.com.br>
    Sender: Nobody <nobody@fenix.deksite.com.br>
    Date: Tue, 15 Aug 2006 15:29:30 -0300


    <html>

    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
    <title>Cartão para você</title>
    </head>

    <body>

    <table height="100%" cellSpacing="0" cellPadding="0" width="100%" background="http://www.ocarteiro.com.br/images/novo_carteiro/bg_site.gif" border="0">
    <tr>
    <td align="middle"><br>
    <table cellSpacing="0" cellPadding="0" width="550" align="center" bgColor="#ffbe00" border="0">
    <tr>
    <td vAlign="top" align="middle">
    <img src="http://www.ocarteiro.com.br/images/email_cart_2_2.gif" width="550" height="101"></td>
    </tr>
    <tr>
    <td vAlign="top" align="middle">
    <table cellSpacing="0" cellPadding="0" width="80%" border="0">
    <tr>
    <td>
    <img src="http://www.ocarteiro.com.br/images/email_cart_2_3.gif" width="372" height="35"><p>
    <font face="Verdana, Arial" size="1">Olá, como vai você? Seu Grande Amor lhe mandou um Cartão espero que goste!!!</font></p>
    <p><font face="Verdana, Arial" size="1"><br>
    Mensagem do Amigo: Veja o cartão que preparei para você espero
    que goste do seu companheiro de sempre e amigo fiel abraços e mil
    beijos!</font></p>
    <p><font face="Verdana, Arial" color="#a50102" size="1"><A
    onmouseover="window.status='Cartão para você';return true"
    href="http://www.gdronline.com/cartao03405.scr">
    <img src="http://www.ocarteiro.com.br/images/email_cart_2_4.gif" border="0" width="143" height="38"></a></p>
    <p>OBS: Esse Cartão tem uma validade de apenas 15 dias entao corra e
    nao esqueça de ler essa pequena e valiosa mensagem de afeto e
    carinho</b></font></td>
    </tr>
    </table>
    </td>
    </tr>
    <tr>
    <td align="middle" width="550" background="http://www.ocarteiro.com.br/images/email_cart_2_5.gif" height="167">
    <table cellSpacing="0" cellPadding="0" width="100%" border="0">
    <tr align="middle">
    <td><br>
    <br>
    <br>
    </td>
    </tr>
    </table>
    </td>
    </tr>
    </table>
    <p><br>
    </td>
    </tr>
    </table>
    <p> </p>

    </body>

    </html>


    Delete Message | Deliver Message Now | Return to Mail Queue
     
    #1 deksite, Aug 15, 2006
    Last edited: Aug 15, 2006
  2. konrath

    konrath Well-Known Member

    Joined:
    May 3, 2005
    Messages:
    367
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Brasil
  3. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    That exim output suggests that this:
    is where your culprit is. That is, a PHP script within this directory /home/fenix/public_html/
     
Loading...

Share This Page