Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

URGENT !! Help with Spammer on Server

Discussion in 'General Discussion' started by Higgins, Feb 8, 2004.

  1. Higgins

    Higgins Well-Known Member

    Joined:
    Jan 31, 2003
    Messages:
    82
    Likes Received:
    0
    Trophy Points:
    156
    We currently have Problems with a Spammer on the Server he is sending Mails with our Servername like ddd@myserver.tld the ser is nobody (Apache) and i cant find the Script which is doing that. When the Mail is send out i looked to the Apache Processes and cant find any suspicios Scripts. I had need to stop Exim because i had 5000 Messages in the Mailqueue and Serverload was rocket high. How can i find out which User is doing that ???
     
  2. Higgins

    Higgins Well-Known Member

    Joined:
    Jan 31, 2003
    Messages:
    82
    Likes Received:
    0
    Trophy Points:
    156
    This is the Message header

    1AppLG-0005IV-C3-H
    nobody 99 99
    <lalala@lalal.at>
    1076248282 0
    -ident nobody
    -received_protocol local
    -body_linecount 1
    -auth_id nobody
    -auth_sender nobody@myserver.tld
    -local
    XX
    1
    themail@domain.tld
     
  3. cyon

    cyon Well-Known Member
    PartnerNOC

    Joined:
    Jan 15, 2003
    Messages:
    320
    Likes Received:
    0
    Trophy Points:
    166
    same problem here since a few days..
     
  4. eglwolf

    eglwolf Well-Known Member

    Joined:
    Jan 1, 2004
    Messages:
    189
    Likes Received:
    0
    Trophy Points:
    166
    I had a similar issue, and I had to compile with phpseexec, to see which php script was sending it out. Once I recompiled it took all of 10 minutes of viewing the "View Relayers" To see the 2 offending account. I check the account took car of those then recompiled without phpsuexec.

    Maybe that will help.
     
  5. AbeFroman

    AbeFroman BANNED

    Joined:
    Feb 16, 2002
    Messages:
    654
    Likes Received:
    1
    Trophy Points:
    318
    I am having the same problem...
    How does phpsuexec show what php script is sending it out?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. tonyxp

    tonyxp Member

    Joined:
    Feb 10, 2004
    Messages:
    24
    Likes Received:
    0
    Trophy Points:
    151
    Can anyone give detail solution to this please? I'm having the same issue
    Thank you
     
  7. goodmove

    goodmove Well-Known Member

    Joined:
    May 12, 2003
    Messages:
    623
    Likes Received:
    1
    Trophy Points:
    168
    Are you having this problem even when you put a limit on the number of outgoing emails per hour per user in WHM tweaks?
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice