Our server getting lots of mail from different mail id and ip

shufil

Well-Known Member
Mar 19, 2014
71
0
6
cPanel Access Level
Root Administrator
Hello,

Our server getting lots of mail from defferent mail id and ip , How can we block this , URGENT matter ,
I delete recived mail id , now sent bounce back mail with No Such User Here" , so how can we resolve this issue .

Any one Please reply .
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,218
463
Re: Our server getting lots of mail from defferent mail id and ip

Hello :)

Is this SPAM email you are trying to stop? Have you enabled SpamAssassin to help prevent this?

Thank you.
 

server9host

Well-Known Member
Sep 18, 2013
160
0
16
India
cPanel Access Level
Root Administrator
Re: Our server getting lots of mail from defferent mail id and ip

Hello,

Please refer link /http://www.blogs.inuxtechsupport.net/?p=164
Find Spammer on cPanel exim server | Inux Techsupport it might be useful for you to trace the spammer on your server.
 

triantech

Well-Known Member
Jul 1, 2014
143
1
18
Kochi, India, India
cPanel Access Level
Root Administrator
Re: Our server getting lots of mail from defferent mail id and ip

Hello,

If you are receveing spam mails, you can do the following :

- Enable/Configure spamassassin

- Enable the RBL option from WHM , which will check each of the IPs that is attempting to send mails
to your server and if the IP is in the RBL list , it will automatically block the mails.

This can be found here :

Home »Service Configuration »Exim Configuration Manager>> RBLs>>Manage Custom RBLs

You can enable the in-build lists or add your RBL lists from above.

- Enable the setting to Reject SPF failures , which will reject emails from domain names without valid SPF records.

You can enable this option from :

WHM » Service Configuration » Exim Configuration Manager>>ACL

I find these tweaks very useful and very strict too :D
 

shufil

Well-Known Member
Mar 19, 2014
71
0
6
cPanel Access Level
Root Administrator
Hello,

Thanks all for reply , yes this is incoming spam, but its getting different mail id and different ip , and SpamAssassin enabled already also enabled Reject SPF failures, RBLs can add more entry but received ip or domain not listed in any black list .

i deleted mail id thats all mail receiving , but now sent bounce back mail with no such as user here , can we block that or limit ?

i used this pico /etc/antivirus.exim and added this if $header_from: contains “confirm that you want to be added to this mailing list” then seen finish endif

But still getting mails .

- - - Updated - - -

Hello,

Please refer link /http://www.blogs.inuxtechsupport.net/?p=164
Find Spammer on cPanel exim server | Inux Techsupport it might be useful for you to trace the spammer on your server.
Hello,

This is nice article , i used this pico /etc/antivirus.exim and added this if $header_from: contains “confirm that you want to be added to this mailing list” then seen finish endif
"confirm that you want to be added to this mailing list" this is mail content but in article seems need mail id , i getting mails not only 10 or 20 mail id .

but still getting mails incomming spam.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,218
463
You can search for "incoming spam" on our forums and you will see dozens upon dozens of threads on this to help find potential solutions.

Thank you.