Help - My server is being used as a spam relay right now

romanus

Well-Known Member
Jul 17, 2004
68
0
156
How can I find out which domain is responsible for the 3000 or so bounced emails that I got in the last 20 minutes?
 

mctDarren

Well-Known Member
Jan 6, 2004
665
4
168
New Jersey
cPanel Access Level
Root Administrator
If you are running suexec you could check the suexec_log to see what scripts ran when, you can grep it to find the specific time that the spam occurred. If you still have mail in queue, check the headers to see if you can see where it came from.

:edit: bounced? might just be someone using your domain name as the reply to when they are sending out spam too....
 
Last edited:

romanus

Well-Known Member
Jul 17, 2004
68
0
156
noe these are in my mail que with my host name in the header
 

mohit

Well-Known Member
Jul 12, 2005
553
0
166
Sticky On Internet
hi,
there are a lot of threads which can help you catch the culprit.
Try searching the forum as
Code:
http://forums.cpanel.net/search.php?searchid=1507222
or
Code:
http://forums.cpanel.net/search.php?searchid=1507239


PS: please correct the spelling of Mahatma Gandhi in your signature.