The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Spamer !

Discussion in 'General Discussion' started by maxhost, Mar 28, 2002.

  1. maxhost

    maxhost Well-Known Member

    Joined:
    Jan 30, 2002
    Messages:
    72
    Likes Received:
    0
    Trophy Points:
    6
    hi all,
    we had some spam complains that comes from an account on our server. Client say he never sent this e-mail.
    Now, prob. somone use our/his SMTP server to send e-mail trought that account ( of course we have disable exim on that server)

    But, is there a way to know wich account has spamed around ??
    Are there some log (exept: /var/log ) ???


    Thank's
     
  2. maxhost

    maxhost Well-Known Member

    Joined:
    Jan 30, 2002
    Messages:
    72
    Likes Received:
    0
    Trophy Points:
    6
    No news about this????
    Anybody can give me a tip??????

    thanks
     
  3. parag

    parag Well-Known Member

    Joined:
    Aug 16, 2001
    Messages:
    115
    Likes Received:
    0
    Trophy Points:
    16
    hi maxhost

    hi maxhost

    you must be having some old formmail scripts installed on your clients site.

    the old version of formmail can be utilised to spam.. what i suggest you to do is.

    first get the latest version of formmail from the following url

    http://www.worldwidemart.com/scripts/formmail.shtml

    plus you should enable suexec option from your WHM -
    if you do not have suexec enabled then the headers of the submited form using formmail script will look something like this

    ------------------------------------------------------------------------------Return-path: &nobody@host.server.com&
    Envelope-to: formemail@clientdomain.com
    Delivery-date: Wed, 03 Apr 2002 13:32:46 +0530
    Received: from nobody by host.server.com with local (Exim 3.35 #1)
    id 16sfjC-00063H-00
    for formemail@clientdomain.com; Wed, 03 Apr 2002 13:32:46 +0530
    To: formemail@clientdomain.com
    From: visitor@hismaildomain.com ()
    Subject: Formmail Submission Subject
    Message-Id: &E16eerC-00063H-@host.server.com&
    Date: Wed, 03 Apr 2002 13:32:46 +0530
    ------------------------------------------------------------------------------

    once you enable suexec the headers will change and you will exactly know which domain has an old formmail script

    after enabling suexec the return path will be urclientusername@host.server.com


    if you want more help you can contact me on
    icq : 17664324
    msn : prince_p@hotmail.com
    yahoo : princeofbaroda

    best regards,
    Parag
     
  4. maxhost

    maxhost Well-Known Member

    Joined:
    Jan 30, 2002
    Messages:
    72
    Likes Received:
    0
    Trophy Points:
    6
    thank you parag :)
     

Share This Page