The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Spam mail from localhost

Discussion in 'E-mail Discussions' started by JoaoTojo, Nov 5, 2015.

  1. JoaoTojo

    JoaoTojo Registered

    Joined:
    Nov 5, 2015
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Mexico
    cPanel Access Level:
    Website Owner
    Hello,

    For the last days my server has been flooded with spam, approximately 3000 sent mails per hour, from our mail domain with random non-existent accounts through the localhost bypassing any security configuration.

    Here is a screenshot from the details of one of the mails sent:

    [​IMG]

    How can I block this kind of spam and how can I detect the root of this malware?

    Thanks you in advance for the response.


    Best regards,
    João
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,814
    Likes Received:
    672
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    The following document is a good place to start:

    How to Prevent Email Abuse - cPanel Knowledge Base - cPanel Documentation

    You can also use a command like this to see if there are any directories with scripts sending out excessive amounts of email:

    Code:
    awk '$3 ~ /^cwd/{print $3}' /var/log/exim_mainlog | sort | uniq -c | sed "s|^ *||g" | sort -nr
    Thank you.
     
Loading...

Share This Page