Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Help tracking down a Spammer....

Discussion in 'General Discussion' started by mydomain, Aug 27, 2004.

  1. mydomain

    mydomain Well-Known Member

    Joined:
    Aug 10, 2003
    Messages:
    138
    Likes Received:
    0
    Trophy Points:
    166
    Hi,

    Our email volume according to mrtg has increased from 10,000 mails per week to 40,000 emails passed the last 5 days only. I have tried to see within cpanel who is relaying or where the mails are coming from with difficulty.

    How can I track down whether there is a spammer using the server or where the emails are originating from?

    TIA
    Mike
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. drmike

    drmike Active Member

    Joined:
    Jul 8, 2004
    Messages:
    31
    Likes Received:
    0
    Trophy Points:
    156
    Location:
    Charlotte, NC
    I know I'm a little late but I know my verson of exim puts the account name in the headers.

    -drmike
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. mydomain

    mydomain Well-Known Member

    Joined:
    Aug 10, 2003
    Messages:
    138
    Likes Received:
    0
    Trophy Points:
    166
    How have you enabled that on there?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. drmike

    drmike Active Member

    Joined:
    Jul 8, 2004
    Messages:
    31
    Likes Received:
    0
    Trophy Points:
    156
    Location:
    Charlotte, NC
    Did find this:

    Main >> Server Setup >> Tweak Settings

    Track the origin of messages sent though the mail server by adding the X-Source headers (exim 4.34+ required)


    Another thing you can use is the exim_mainlog file. When an email is sent, you should get the following:

    2004-09-11 11:21:53 1C69hf-00012m-0X <= someuser@mydomain.com U=myaccount P=local-bsmtp S=1781 id=20040911150508.16972.qmail@mydomain.com

    With the U being the account.

    -drmike
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice