The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Spam Problem (Please help me)

Discussion in 'General Discussion' started by UndeaD, Aug 28, 2005.

  1. UndeaD

    UndeaD Well-Known Member

    Joined:
    Apr 16, 2005
    Messages:
    62
    Likes Received:
    0
    Trophy Points:
    6
    Hello Friends,
    I have a spam problem in my server.
    I am using Cpanel.
    Problem : Someone using my server is sending spam mails to the banks.. I received a warning mail and i have been given three days to find the spammer site and delete.. When i do "ps x", i see that a person sends mail always, but the mail is sent from "nobody@server.servername.com". Besides, when i ping that addres, it directly goes to the cpanel main ip.. how can i solve this problem.

    ps x

    http://img5.imageshack.us/img5/655/exim2qi.jpg

    [removed spam - it's not a great idea to post emails in a forum thread]
     
    #1 UndeaD, Aug 28, 2005
    Last edited by a moderator: Aug 28, 2005
  2. mohit

    mohit Well-Known Member

    Joined:
    Jul 12, 2005
    Messages:
    553
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Sticky On Internet
    Before doing anything you must Disable the user nobody to send mails

    this can be easily done from your Root WHM -->Tweak Settings--->
    Prevent the user 'nobody' from sending out mail to remote addresses (php and cgi scripts generally run as nobody if you are not using phpsuexec and suexec respectively.)

    Once you do this, you can look for logs and find out the user/domain originating the e-mails.

    Regards,
    mohit
     
  3. micron

    micron Member

    Joined:
    Dec 1, 2002
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    1
    hi,
    i am having the same problem. where can i look for the logs?
     
  4. dalem

    dalem Well-Known Member
    PartnerNOC

    Joined:
    Oct 24, 2003
    Messages:
    2,577
    Likes Received:
    40
    Trophy Points:
    48
    Location:
    SLC
    cPanel Access Level:
    DataCenter Provider
    /var/log/exim_mainlog
     
  5. nickb

    nickb Well-Known Member

    Joined:
    Feb 25, 2005
    Messages:
    347
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    India
    In the first EXIM text box make this entry

    Code:
    log_selector = +all
    click on save ..

    then check /var/log/exim_mainlog to trace the directories which are generating these nobody mails.
     
Loading...

Share This Page