The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Spam email using -remote- ??

Discussion in 'E-mail Discussions' started by robinantill, May 2, 2013.

  1. robinantill

    robinantill Registered

    Joined:
    Apr 22, 2013
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    Using CENTOS 5.9 x86_64 standard – ************ WHM 11.36.1 (build 5)

    I'm very new to using my own dedicated derver which is used for my many domains.

    Looking to find how what emails are going out due to spam being sent out through my server

    When I look in Home » Email » View Sent Summary

    I find that user -remote- has sent out 537 successful emails in one day

    Is it possible to allow the server to only send email through user accounts such as

    DOMAIN test.co.uk USER testname
    DOMAIN notest.co.uk USER notestname
    DOMAIN threetest.co.uk USER testname3

    etc.

    If this can be done is this likely to have any side effects?

    Do all outgoing emails have to go through an email account and by entering a password, even any outgoing emails through script etc. If I reset all the passwords on all my outgoing email accounts would this stop this happening? I must admit I was very lax on the passwords used, but now know they need to be something like +k*J23_6

    Thanks in advance.
     
  2. quietFinn

    quietFinn Well-Known Member

    Joined:
    Feb 4, 2006
    Messages:
    998
    Likes Received:
    10
    Trophy Points:
    18
    Location:
    Finland
    cPanel Access Level:
    Root Administrator
    Click in the "-remote-" row and you see a detailed report.
     
  3. robinantill

    robinantill Registered

    Joined:
    Apr 22, 2013
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    Thanks for that.
    When I look at this report the first column says SENDER. Does this mean that that email address is sending out emails through my server or does it mean that these are emails being sent to my servers for emails on my server?
     
  4. quietFinn

    quietFinn Well-Known Member

    Joined:
    Feb 4, 2006
    Messages:
    998
    Likes Received:
    10
    Trophy Points:
    18
    Location:
    Finland
    cPanel Access Level:
    Root Administrator
    Because the sender is "remote" the email is sent from outside, either to a mailbox in your server or to an external mailbox. "Sender" is the sender's email address (but that can be fake of course".
    In the "Actions" column in every row you can click the icon and you see more details about the email, for ex. the sender's IP address.
     
  5. robinantill

    robinantill Registered

    Joined:
    Apr 22, 2013
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    Sorry, if I need this confirming.
    Where it shows -remote- this means emails coming into my server and is not sending them out using my server?
    Do I need to worry about this issue in connection with spam emails?
    Thanks.
     
  6. quietFinn

    quietFinn Well-Known Member

    Joined:
    Feb 4, 2006
    Messages:
    998
    Likes Received:
    10
    Trophy Points:
    18
    Location:
    Finland
    cPanel Access Level:
    Root Administrator
    -remote- means the email is sent from outside of your server, either to a mailbox in your server, or to an external mailaddress.

    If it is sent through your server it is possible only if the sender is authenticated (unless your server is misconfigured).

    If a spammer gets the password of a mailbox in your server they are able to send spam, through your server.
     
  7. robinantill

    robinantill Registered

    Joined:
    Apr 22, 2013
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    Thank you. I have the basic set up so hopefully should not be misconfigured. I will change the passwords on my mailbox accounts to something totally random which will hopefully stop anyone sending emails that way.
     
Loading...

Share This Page