Email spam sent through my server

tribulant

• June 09, 2014 08:20

Good day, Someone is sending spam through my server. This is the mail control data: contrid 513 501 1402319735 0 -ident contrid -received_protocol local -body_linecount 53 -max_received_linelength 135 -auth_id contrid -auth_sender contrid@tri.tribulant.org -allow_unqualified_recipient -allow_unqualified_sender -local -sender_set_untrusted XX 1 safefy-tubs@total-bathtub-deals.me
I've changed the passwords on that account and for all it's mail accounts and that didn't work so I suspended it and that still didn't work so I have no idea how to stop it. Can someone give me some guidance, please?

• 

  JaredR.

  • June 09, 2014 13:53

  Restart Exim and the POP/IMAP service. That will cause the sender to need to authenticate again, which it should not be able to do since you changed the password and suspended the account.

  0
• 

  tribulant

  • June 09, 2014 18:10

  [quote="cPanelJared, post: 1660522">Restart Exim and the POP/IMAP service. That will cause the sender to need to authenticate again, which it should not be able to do since you changed the password and suspended the account.
  Thanks, will try this now. Then, how can I prevent this completely? I want to unsuspend the account at some stage because I use it.

  0
• 

  tribulant

  • June 09, 2014 18:47

  [quote="cPanelJared, post: 1660522">Restart Exim and the POP/IMAP service. That will cause the sender to need to authenticate again, which it should not be able to do since you changed the password and suspended the account.
  It seems like this may have worked now. There used to be a new email in the queue every few minutes. I now changed the passwords again on the cPanel account and also on all the email accounts. I then restarted both Exim and Dovecot and no spam emails in the queue yet. So if the queue remains clean, it means someone got a hold of the username/password for one of my mailboxes. I'll post back here in a couple of hours to let you know.

  0

Please sign in to leave a comment.