The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Something is sending spam emails from random generated emails @mydomain

Discussion in 'E-mail Discussions' started by Graphilip, Aug 11, 2014.

  1. Graphilip

    Graphilip Member

    Joined:
    Mar 30, 2014
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hi guys,

    I'm quite new to WHM, i've upgraded a few months ago from shared hosting to unmanaged vps, and today i've got an email from my webhosting provider stating "We have received a spam report regarding your server with us and we need you to investigate it and fix the problem in question."

    unfortunatley it's an "unmanaged" vps, so i wont get significant help from the webhosting company, and i thought i try here too, maybe you could give me some guidance on how to fix this.

    Here is a print screen of the Mail delivery reports in WHM: /http://puu.sh/aO2el/9f64cad2dd.png (they are about 42 pages only for August 11th)

    thank you in advance for any infos,

    Filip
     
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,478
    Likes Received:
    203
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    In your cPanel for this account, Mail section, Default Address, what are your settings here?

    Documentation for this is available here:
    Default Address - cPanel Documentation

    Preferred option should be:
    Discard with error to sender (at SMTP time)
    No Such User here
     
  3. Graphilip

    Graphilip Member

    Joined:
    Mar 30, 2014
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hi,

    right now, after browsing the forum, i've set the default adress like this: /http://puu.sh/aO6X9/32898c0688.png

    and also enabled SMTP Restrictions.

    Now, after all that, in the email delivery reports i have something like this: /http://puu.sh/aO7aE/b3f254419a.png (still trying but not succeeding i think)
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Please refrain from linking images from external websites. Instead, attach the images directly to your post. The following document is a good place to get started when attempting to prevent SPAM:

    cPanel - Prevent Email Abuse

    Thank you.
     
  5. Graphilip

    Graphilip Member

    Joined:
    Mar 30, 2014
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hi,

    thank you for your reply, and im sorry for the inconvenience,

    from the "Prevent Email Abuse" page i've done the followings:

    - Enable SMTP Restrictions
    - Restrict the nobody system user's send mail permissions
    - Configure high failure rate protection

    and this is what i have now in the "Mail Delivery Reports":

    10569008_942620645755039_8908203784359301183_n.png

    every minute, between 4 and 10-12 (unsuccesful) tryouts.
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    You will need to review the message headers from those messages, determine the source of the message, and delete the script or suspend the offending account.

    Thank you.
     
Loading...

Share This Page