Spam email using -remote- ??

[robinantill]

Using CENTOS 5.9 x86_64 standard – ************ WHM 11.36.1 (build 5)

I'm very new to using my own dedicated derver which is used for my many domains.

Looking to find how what emails are going out due to spam being sent out through my server

When I look in Home » Email » View Sent Summary

I find that user -remote- has sent out 537 successful emails in one day

Is it possible to allow the server to only send email through user accounts such as

DOMAIN test.co.uk USER testname
DOMAIN notest.co.uk USER notestname
DOMAIN threetest.co.uk USER testname3

etc.

If this can be done is this likely to have any side effects?

Do all outgoing emails have to go through an email account and by entering a password, even any outgoing emails through script etc. If I reset all the passwords on all my outgoing email accounts would this stop this happening? I must admit I was very lax on the passwords used, but now know they need to be something like +k*J23_6

Thanks in advance.

 

[quietFinn]

When I look in Home » Email » View Sent Summary

I find that user -remote- has sent out 537 successful emails in one day

Click in the "-remote-" row and you see a detailed report.

 

[robinantill]

Thanks for that.
When I look at this report the first column says SENDER. Does this mean that that email address is sending out emails through my server or does it mean that these are emails being sent to my servers for emails on my server?

 

[quietFinn]

Thanks for that.
When I look at this report the first column says SENDER. Does this mean that that email address is sending out emails through my server or does it mean that these are emails being sent to my servers for emails on my server?

Because the sender is "remote" the email is sent from outside, either to a mailbox in your server or to an external mailbox. "Sender" is the sender's email address (but that can be fake of course".
In the "Actions" column in every row you can click the icon and you see more details about the email, for ex. the sender's IP address.

 

[robinantill]

Sorry, if I need this confirming.
Where it shows -remote- this means emails coming into my server and is not sending them out using my server?
Do I need to worry about this issue in connection with spam emails?
Thanks.

 

[quietFinn]

Where it shows -remote- this means emails coming into my server and is not sending them out using my server?
Do I need to worry about this issue in connection with spam emails?

-remote- means the email is sent from outside of your server, either to a mailbox in your server, or to an external mailaddress.

If it is sent through your server it is possible only if the sender is authenticated (unless your server is misconfigured).

If a spammer gets the password of a mailbox in your server they are able to send spam, through your server.

 

[robinantill]

Thank you. I have the basic set up so hopefully should not be misconfigured. I will change the passwords on my mailbox accounts to something totally random which will hopefully stop anyone sending emails that way.