Outgoing Spam from Server

sahostking

Well-Known Member
May 15, 2012
366
8
68
Cape Town, South Africa
cPanel Access Level
Root Administrator
Twitter
Hi guys,

I've just noticed over 8000 emails being sent to random yahoo addresses,etc. and error messages coming through to admin account with the following:

Time: Fri Jul 5 17:17:41 2013 +0200
Type: AUTHRELAY, Remote IP - 92.52.162.182 (UA/Ukraine/-)
Count: 107 emails relayed
Blocked: No

Any idea how to stop this from happening completely.

Here is what I've done so far.

1. Enabled DKIM on all accounts
2. Turned off - Allow Plaintext Authentication (from remote clients)
3. Set LFD to block it after a certain number via CSF
4. Disabled domain account holder password to login into any email accoutn via Tweak Settings.

Anything else?

Thanks
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,202
363
Hello :)

I recommend reviewing the email headers of these messages to see if you can determine the source of the messages. The following document also includes some useful information how to prevent email abuse:

How to: Prevent Email Abuse

Thank you.