server beeing used to spam help

[roby2k]

how can i lock down my server from beeing used as a spam server?
i carnt take down exim for to long due to clients needing emails!

 

[roby2k]

think i've sorted it now

 

[Heritz]

think i've sorted it now

Can you explain how? I am having the same issue. Some user is using a PHP loop to send SPAM.

 

[bazzi]

- shutdown exim
- restart apache so the php file isn't looping
- backup the account
- disable the account (you may want to remove it)
- startup exim
- contact your legal advisor to take legal steps agains your client

 

[levelsupport]

few of the best solutions i would adapt

- keep a average horuly limit for sending mails
- enable phpsuexec, disable nobody from sending mails and extended logging for exim (helps tracking the exact script)