Wrong host-name and domain name in welcome email after server was hacked.

dzacharias

Member
Nov 30, 2013
5
0
1
cPanel Access Level
Root Administrator
Ok this can be that hard. Obviously there is a setting somewhere that this script kiddy changed up. It not from the section that you suggested... Any other ideas? Where is this data generated form?
 

dzacharias

Member
Nov 30, 2013
5
0
1
cPanel Access Level
Root Administrator
RESOLVED!!!

WHM sends a New account creation email template to a given email address after the creation of a new account.

This EMAIL SUBJECT line can be modified via the /etc/wwwacct.conf file
Code:
LOGSTYLE combined
TTL 14400
DEFWEBMAILTHEME x3
HOST host1.xxxxxxxxx.xxxxxx Change this to your Fully Qualified Domain Name!
NS ns1.xxxxxxxxx.xxxxxx
SCRIPTALIAS y
DEFMOD x3
NS4
MINUID 500
NS3
NS2 ns2.xxxxxxxxx.xxxxxx
ETHDEV venet0:0
CONTACTEMAIL [email protected]
ADDR 184.22.255.58
CONTACTPAGER yourem[email protected]
HOMEMATCH home
HOMEDIR /home
NSTTL 86400

Good luck!
 

quietFinn

Well-Known Member
Feb 4, 2006
2,041
551
493
Finland
cPanel Access Level
Root Administrator
When you go to WHM -> Networking Setup -> Change Hostname
and set the hostname, even if it seems correct, WHM updates all the files where the hostname exists, including /etc/wwwacct.conf
 

dzacharias

Member
Nov 30, 2013
5
0
1
cPanel Access Level
Root Administrator
Hi quietFinn,
thanks for the response. My server was rooted, For some reason they didn't lock me out of the server, which I found strange...
I had to clean up the remnants of files that were all over the place. I changed the FQDN in WHM -> Networking Setup -> Change Hostname, but for some reason it did not propagate to the /etc/wwwacct.conf I had to go in there and hand jam it in there. Just did a reboot and checked it again, looks good to go.
Took some work on my part but I finally got it, figured I would share with the community.
Thanks again.
DZ