The Community Forums

Interact with an entire community of cPanel & WHM users.
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Help tracking down a Spammer....

Discussion in 'General Discussion' started by mydomain, Aug 27, 2004.

  1. mydomain

    mydomain Well-Known Member

    Joined:
    Aug 10, 2003
    Messages:
    138
    Likes Received:
    0
    Trophy Points:
    16
    Hi,

    Our email volume according to mrtg has increased from 10,000 mails per week to 40,000 emails passed the last 5 days only. I have tried to see within cpanel who is relaying or where the mails are coming from with difficulty.

    How can I track down whether there is a spammer using the server or where the emails are originating from?

    TIA
    Mike
     
  2. drmike

    drmike Active Member

    Joined:
    Jul 8, 2004
    Messages:
    31
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Charlotte, NC
    I know I'm a little late but I know my verson of exim puts the account name in the headers.

    -drmike
     
  3. mydomain

    mydomain Well-Known Member

    Joined:
    Aug 10, 2003
    Messages:
    138
    Likes Received:
    0
    Trophy Points:
    16
    How have you enabled that on there?
     
  4. drmike

    drmike Active Member

    Joined:
    Jul 8, 2004
    Messages:
    31
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Charlotte, NC
    Did find this:

    Main >> Server Setup >> Tweak Settings

    Track the origin of messages sent though the mail server by adding the X-Source headers (exim 4.34+ required)


    Another thing you can use is the exim_mainlog file. When an email is sent, you should get the following:

    2004-09-11 11:21:53 1C69hf-00012m-0X <= someuser@mydomain.com U=myaccount P=local-bsmtp S=1781 id=20040911150508.16972.qmail@mydomain.com

    With the U being the account.

    -drmike
     
Loading...

Share This Page