The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Spamming on shared hosting

Discussion in 'Security' started by milindras, Apr 23, 2013.

  1. milindras

    milindras Member

    Joined:
    Dec 29, 2010
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    UK
    Hi,
    We have a whm/cpanel web hosting server which hosts many websites. All websites shared 01 IP address.

    Customer A has a hosting plan with us which also has email hosting
    Recently Customer A's computer was effected with a trojan/virus started to send thousands of spam emails to outside and that made our shared IP black listed with several Spam blocking servers so they could not send emails to some users. This also effected all the other customers on our server as they also use the same IP to send emails.
    My questions are

    1. Is this a normal situation for shared hosting? Or is there any other things I can tweak from my server end to prevent this?

    2. How do I know when this kind of situation likely to be happen or as soon as it happens? Is there any free tools I can use so they can send alerts when spamming from my IP?

    Many Thanks
     
  2. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    940
    Likes Received:
    55
    Trophy Points:
    28
    cPanel Access Level:
    DataCenter Provider
  3. quietFinn

    quietFinn Well-Known Member

    Joined:
    Feb 4, 2006
    Messages:
    998
    Likes Received:
    10
    Trophy Points:
    18
    Location:
    Finland
    cPanel Access Level:
    Root Administrator
    ConfigServer Firewall
    ConfigServer Security & Firewall
     
  4. Eric

    Eric Administrator
    Staff Member

    Joined:
    Nov 25, 2007
    Messages:
    746
    Likes Received:
    11
    Trophy Points:
    18
    Location:
    Texas
    cPanel Access Level:
    Root Administrator
    Howdy,

    There are a few tweaks that can help fight spam from your server.

    Max hourly emails per domain - Set this to something to contain their damage if a site starts sending out spam.

    Prevent “nobody” from sending mail

    Track email origin via X-Source email headers

    This way if you do have a site go rouge on you, it's easier to track or they can't do as much damage.

    Thanks!
     
  5. storminternet

    storminternet Well-Known Member

    Joined:
    Nov 2, 2011
    Messages:
    462
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    Root Administrator
    If there is any hacked account on server then spamming can also happen from it. Check the script source by monitoring exim logs with the help of below command.

    tail -f /var/log/exim_mainlog | grep cwd
    cwd= current source of the emails.
     
Loading...

Share This Page