This SMTP server is running on a non-standard port. This might be a backdoor set up by attackers to send spam or evencontrol of a targeted machine.

[MacHelpNashville]

security scan reveals:
This SMTP server is running on a non-standard port. This might be a backdoor set up by attackers to send spam or even control of a targeted machine.

I only need the email on this server to be able to send me notices of admin things like backup failed etc.
I have no email users.
The email of the domain is handled by Google Workplace and Proofpoint.

Is there a way to completely turn off email and still be able to get admin notices of events?

Thank you!

 

[cPRex]

Hey there! It's possible this is just a false-positive as well. Can you let me know what port was flagged?

If you use WHM >> Service Manager to disable Exim Mailserver and Mailman, the server will still be able to send the root notifications.

 

[MacHelpNashville]

it didn't give a port just the error.

Screen Shot 2021-10-11 at 12.05.24 PM.png

Shared with Dropbox

www.dropbox.com

I also noticed that all of my notices about things related to the server are going into this default user email box:

Screen Shot 2021-10-11 at 12.07.34 PM.png

Shared with Dropbox

www.dropbox.com

I really want all notices to go to my company email and don't need any other email services running on the server.
So should I try to disable Exim Mailserver and Mailman and then how do I tell it to send me all the notices?

 

[MacHelpNashville]

should i also turn off ?
IMAP Server
Dovecot IMAP Server
and
POP3 Server
Dovecot POP3 Server

 

[cPRex]

You can disable all of those. The way the server notifications are handled there is no further adjustment necessary as you'll continue to receive those as normal.

 

[MacHelpNashville]

ok, i turned off all four of those:
IMAP, POP3, Exim Mailserver and Mailman.

so how and where do i put my email to get the notices?

Thank you.

 

[cPRex]

The notifications go to the main root contact configured in WHM >> Basic WebHost Manager Setup. It's the very first option on the page.

For more control over what you get notified about, you can check WHM >> Contact Manager.

 

[MacHelpNashville]

thank you!

 

[cPRex]

Sure thing - always happy to help!