The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Problems with Spam from Horde and Squirrelmail

Discussion in 'E-mail Discussions' started by burnboy, Nov 9, 2005.

  1. burnboy

    burnboy Registered

    Joined:
    Sep 2, 2004
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    We're having some serious problems with e-mail spamming with the use of Horde and Squirrelmail..

    Here are some of the Headers:

    X-AntiAbuse: Originator/Caller UID/GID - [32001 503] / [47 12]
    X-Source: /usr/local/cpanel/3rdparty/bin/php
    X-Source-Args: /usr/local/cpanel/3rdparty/bin/php /usr/local/cpanel/base/horde/imp/compose.php
    X-Source-Dir: :/base/horde/imp

    UID 32001 is cpanel and they're sending as cpanel@(hostname)

    On the same note, there was a problem with a user who I've terminated from the server but spam is STILL being sent using their domain where (DOMAINNAMEHERE) is:

    X-AntiAbuse: Originator/Caller UID/GID - [32559 503] / [47 12]
    X-Source: /usr/local/cpanel/3rdparty/bin/php
    X-Source-Args: /usr/local/cpanel/3rdparty/bin/php /usr/local/cpanel/base/3rdparty/squirrelmail/src/compose.php
    X-Source-Dir: (DOMAINNAMEHERE):/base/3rdparty/squirrelmail/src

    The e-mails using Horde are the cpanel@hostname e-mails while the squirrelmail ones are sending from 2 accounts that I've already suspended..decided they had no useful website and then terminated.

    What am I missing to get these stopped?

    Any help is appreciated.

    Ryan
     
  2. burnboy

    burnboy Registered

    Joined:
    Sep 2, 2004
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    bump.

    I guess nobody cares about defeating spam.

    WELL THEN.
     
  3. myusername

    myusername Well-Known Member
    PartnerNOC

    Joined:
    Mar 6, 2003
    Messages:
    691
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    chown -R us.*yourbase*
    cPanel Access Level:
    DataCenter Provider
    Twitter:
    Is your demo account turned on?
     
  4. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    No, it just means that no-one has anything to add. These are not support forums, they're about fellow admins helping out of that can/want to.
     
Loading...

Share This Page