The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

URGENT !! Help with Spammer on Server

Discussion in 'General Discussion' started by Higgins, Feb 8, 2004.

  1. Higgins

    Higgins Well-Known Member

    Joined:
    Jan 31, 2003
    Messages:
    82
    Likes Received:
    0
    Trophy Points:
    6
    We currently have Problems with a Spammer on the Server he is sending Mails with our Servername like ddd@myserver.tld the ser is nobody (Apache) and i cant find the Script which is doing that. When the Mail is send out i looked to the Apache Processes and cant find any suspicios Scripts. I had need to stop Exim because i had 5000 Messages in the Mailqueue and Serverload was rocket high. How can i find out which User is doing that ???
     
  2. Higgins

    Higgins Well-Known Member

    Joined:
    Jan 31, 2003
    Messages:
    82
    Likes Received:
    0
    Trophy Points:
    6
    This is the Message header

    1AppLG-0005IV-C3-H
    nobody 99 99
    <lalala@lalal.at>
    1076248282 0
    -ident nobody
    -received_protocol local
    -body_linecount 1
    -auth_id nobody
    -auth_sender nobody@myserver.tld
    -local
    XX
    1
    themail@domain.tld
     
  3. cyon

    cyon Well-Known Member
    PartnerNOC

    Joined:
    Jan 15, 2003
    Messages:
    320
    Likes Received:
    0
    Trophy Points:
    16
    same problem here since a few days..
     
  4. eglwolf

    eglwolf Well-Known Member

    Joined:
    Jan 1, 2004
    Messages:
    168
    Likes Received:
    0
    Trophy Points:
    16
    I had a similar issue, and I had to compile with phpseexec, to see which php script was sending it out. Once I recompiled it took all of 10 minutes of viewing the "View Relayers" To see the 2 offending account. I check the account took car of those then recompiled without phpsuexec.

    Maybe that will help.
     
  5. AbeFroman

    AbeFroman BANNED

    Joined:
    Feb 16, 2002
    Messages:
    654
    Likes Received:
    1
    Trophy Points:
    0
    I am having the same problem...
    How does phpsuexec show what php script is sending it out?
     
  6. tonyxp

    tonyxp Member

    Joined:
    Feb 10, 2004
    Messages:
    24
    Likes Received:
    0
    Trophy Points:
    1
    Can anyone give detail solution to this please? I'm having the same issue
    Thank you
     
  7. goodmove

    goodmove Well-Known Member

    Joined:
    May 12, 2003
    Messages:
    624
    Likes Received:
    0
    Trophy Points:
    16
    Are you having this problem even when you put a limit on the number of outgoing emails per hour per user in WHM tweaks?
     
Loading...

Share This Page