Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Spamer !

Discussion in 'General Discussion' started by maxhost, Mar 28, 2002.

  1. maxhost

    maxhost Well-Known Member

    Joined:
    Jan 30, 2002
    Messages:
    72
    Likes Received:
    0
    Trophy Points:
    306
    hi all,
    we had some spam complains that comes from an account on our server. Client say he never sent this e-mail.
    Now, prob. somone use our/his SMTP server to send e-mail trought that account ( of course we have disable exim on that server)

    But, is there a way to know wich account has spamed around ??
    Are there some log (exept: /var/log ) ???


    Thank's
     
  2. maxhost

    maxhost Well-Known Member

    Joined:
    Jan 30, 2002
    Messages:
    72
    Likes Received:
    0
    Trophy Points:
    306
    No news about this????
    Anybody can give me a tip??????

    thanks
     
  3. parag

    parag Well-Known Member

    Joined:
    Aug 16, 2001
    Messages:
    115
    Likes Received:
    0
    Trophy Points:
    316
    hi maxhost

    hi maxhost

    you must be having some old formmail scripts installed on your clients site.

    the old version of formmail can be utilised to spam.. what i suggest you to do is.

    first get the latest version of formmail from the following url

    http://www.worldwidemart.com/scripts/formmail.shtml

    plus you should enable suexec option from your WHM -
    if you do not have suexec enabled then the headers of the submited form using formmail script will look something like this

    ------------------------------------------------------------------------------Return-path: &nobody@host.server.com&
    Envelope-to: formemail@clientdomain.com
    Delivery-date: Wed, 03 Apr 2002 13:32:46 +0530
    Received: from nobody by host.server.com with local (Exim 3.35 #1)
    id 16sfjC-00063H-00
    for formemail@clientdomain.com; Wed, 03 Apr 2002 13:32:46 +0530
    To: formemail@clientdomain.com
    From: visitor@hismaildomain.com ()
    Subject: Formmail Submission Subject
    Message-Id: &E16eerC-00063H-@host.server.com&
    Date: Wed, 03 Apr 2002 13:32:46 +0530
    ------------------------------------------------------------------------------

    once you enable suexec the headers will change and you will exactly know which domain has an old formmail script

    after enabling suexec the return path will be urclientusername@host.server.com


    if you want more help you can contact me on
    icq : 17664324
    msn : prince_p@hotmail.com
    yahoo : princeofbaroda

    best regards,
    Parag
     
  4. maxhost

    maxhost Well-Known Member

    Joined:
    Jan 30, 2002
    Messages:
    72
    Likes Received:
    0
    Trophy Points:
    306
    thank you parag :)
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice