The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

what domain is it?

Discussion in 'E-mail Discussions' started by Nishant80, Jun 27, 2012.

  1. Nishant80

    Nishant80 Well-Known Member

    Joined:
    May 7, 2012
    Messages:
    63
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    I see there are a lot of mails in queue in exim. It is sent by this particular user hisname@my-server.com. Now how can I find out which domain is this email address under?

    I want to suspend his account but couldn't figure out which account is it?
     
  2. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    If you still have some of the emails in the queue, open up one and look at the header in the email to see if you can track down the actual account being used.

    If you cannot, please post the example header for us to look (we don't need the message body contents, only the header).
     
  3. Nishant80

    Nishant80 Well-Known Member

    Joined:
    May 7, 2012
    Messages:
    63
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    Hello,
    Sorry for the delayed reply. This problem is becoming worst now and our IP is being blocked everywhere. I am not particularly sure how would I find and give you the header. Can you please guide me?
     
  4. Nishant80

    Nishant80 Well-Known Member

    Joined:
    May 7, 2012
    Messages:
    63
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    Hi,
    After digging a bit deeper, this is what I found out:


    Code:
    1SlbYS-0002hZ-Id-H
    shubhxam 1187 1186
    <shubhxam@myserver.domain.com>
    1341216020 0
    -ident shubhxam
    -received_protocol local
    -body_linecount 1
    -max_received_linelength 85
    -auth_id shubhxam
    -auth_sender shubhxam@myserver.domain.com
    -allow_unqualified_recipient
    -allow_unqualified_sender
    -local
    XX
    1
    shibin83@163.com
    
    212P Received: from shubhxam by myserver.domain.com with local (Exim 4.77)
    (envelope-from <shubhxam@myserver.domain.com>)
    id 1SlbYS-0002hZ-Id
    for shibin83@163.com; Mon, 02 Jul 2012 13:30:22 +0530
    021T To: shibin83@163.com
    027 Subject: Enlarge your tool
    033F From: <nzamorano@assurinvest.ch>
    061I Message-Id: <E1SlbYS-0002hZ-Id@myserver.domain.com>
    038 Date: Mon, 02 Jul 2012 13:30:20 +0530 
     
  5. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Do you have a user called shubhxam on your system?
     
  6. Nishant80

    Nishant80 Well-Known Member

    Joined:
    May 7, 2012
    Messages:
    63
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    Not that I can find.
     
  7. Nishant80

    Nishant80 Well-Known Member

    Joined:
    May 7, 2012
    Messages:
    63
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    Okay, found it! Thanks. I have temrinated that account now.

    Also, can you tell me what measures can we take to prevent spam? Also, I see that the server IP has been blocked by Baracuda and a few others, what can I do?
     
Loading...

Share This Page