Huge Email Issue

[fcomstoc]

We have a VPS with WHM and cPanel, everything has been ok except EXIM has taken over the VPS, within a week it runs out of iNodes and space due the the massive amounts of emails we seem to be getting, its all garbage. We do not host email at all on this server, I have to keep EXIM for outgoing from the sites on the server.

I set all the account's default address to go to :blackhole but I still seem to be getting thousands of emails an hour in the /var/spool/exim/input/ folder.

This issue has crashed the sever twice, once because it ran out of space and the other because it ran out of iNodes.

I need to get this resolved ASAP, not sure what to do at this point,

Thank you.

 

[24x7serversecurity]

Hey there ,

It appears that you are getting spam emails. So you can setup Spam Assassin which filters those Spam emails according to their Spam score. You can specify the spam score to lowest number as you do not use this server for Mails. Go through the documentations of Spam Assassin and configure your Exim accordingly.

Tweak Settings - Mail - Documentation - cPanel Documentation

Also Login to WHM >> go to Exim Configuration Manager >> search "SpamAssassin"
and tweak the scores.

 

[fcomstoc]

I did as you said, I updated the score from 0 to 10.0 hopefully this helps with the issue, do you know is there any other way to prevent incoming email while still allowing outgoing?

I checked back about 5 minutes later and there are 78 new emails, so no luck using that one,

 

[24x7server]

Hello ,

I think you are accounts are sending lot of mail from your server and due to that all mail are stuck in your server mail queue (/var/spool/exim/input) , I will suggest you please check your mail logs and try to find out which account is sending all these mails. And remove all spam mails from your server mail queue so that you will get inode full issue.

 

[cPanelMichael]

Hello,

The following documents offer details on some additional options you can enable to help prevent SPAM (both incoming and outgoing):

Exim Configuration Manager - Basic Editor - Documentation - cPanel Documentation
How to Prevent Email Abuse - cPanel Knowledge Base - cPanel Documentation

Thank you.