System is sending Spam emails

keat63

Well-Known Member
Nov 20, 2014
1,961
266
113
cPanel Access Level
Root Administrator
Could this be your system replying to a message from the .ru and .qq domains.

Maybe these domains have spammed your server, and your server has rejected them with a bounce message ?
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,884
2,250
463
I found a domain causing this problem.
How can i stop this domain sending emails at this tdls?
Hello @thanasis,

There's a thread here with discussion of blocking outgoing email to a specific TLD, however generally the better approach is to address the source of the SPAM. Can you share more information about the offending account? For instance, were the emails sent using SMTP authentication or through a PHP script?

Thank you.
 

foxmedo

Active Member
Apr 21, 2014
43
1
58
cPanel Access Level
Root Administrator
we have same issue,

some times we find 200K & 300K in mail queue and we do not have a clear way to detect the cause and email sending to suspend it
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
11,743
1,869
363
cPanel Access Level
Root Administrator
@foxmedo - I'd recommend working through our guide here:


With that many messages in the queue you will have plenty of data to use when you run this command:

Code:
awk '$3 ~ /^cwd/{print $3}' /var/log/exim_mainlog | sort | uniq -c | sed "s|^ *||g" | sort -nr
although be aware it could take several minute to run and process all that email.