Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Problems With Spam

Discussion in 'E-mail Discussion' started by charisma09, Jun 16, 2018.

  1. charisma09

    charisma09 Registered

    Joined:
    Jun 16, 2018
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    hcm
    cPanel Access Level:
    Website Owner
    I currently am overwhelm by spam email to /home/*****/mail/new coming from probably some spam script hidden in one of my many site. I set all my site Email Routing to Remote Mail Exchanger and delete all MX entry, putting firewall block on port 25 and I'm still getting them. Can I use the Default Address function and pipe them to some script to auto delete them somehow from Harddrive? Any expert who handles this before can give some advice? I just want them gone and never written to hard drive. Thanks.
     
  2. cPanelLauren

    cPanelLauren Forums Analyst II
    Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    3,517
    Likes Received:
    251
    Trophy Points:
    193
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    Hi @charisma09

    Ultimately you want to find out where the spam is originating from then you can identify how to remove it. If you think there's a script sending the mail running something like:

    Code:
    grep cwd /var/log/exim_mainlog | grep -v /var/spool | awk -F"cwd=" '{print $2}' | awk '{print $1}' | sort | uniq -c | sort -n
    
    Will show each directory in the exim logs mail was sent from and how many were sent.

    Let us know the output of this if you need any assistance.

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Skhilled44

    Skhilled44 Registered

    Joined:
    Jul 15, 2017
    Messages:
    4
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Reading, PA, USA
    cPanel Access Level:
    Root Administrator
    Sorry for butting in but this is very interesting. @cPanelLauren, what is the time frame of that code...like all emails sent today, all week or what?
     
  4. cPanelLauren

    cPanelLauren Forums Analyst II
    Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    3,517
    Likes Received:
    251
    Trophy Points:
    193
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    It depends on how long it's been since the exim_mainlog was rotated. I've seen some folks that don't rotate theirs often so it'll go back pretty far but usually the log file is rotated every few days.


    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. Skhilled44

    Skhilled44 Registered

    Joined:
    Jul 15, 2017
    Messages:
    4
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Reading, PA, USA
    cPanel Access Level:
    Root Administrator
    Ok, thank you very much! :)
     
  6. cPanelLauren

    cPanelLauren Forums Analyst II
    Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    3,517
    Likes Received:
    251
    Trophy Points:
    193
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice