Cron Jobs filling mail queue

Leriss

• February 25, 2015 14:43

Hello, I've noticed our mail queue on one of the servers is being filled up all the time by cron job e-mail, most come from jailed shell environemnts, here is an example:
1YN2fH-001527-8U-D This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: XXXXXXXX@XXXXXXXX ------ This is a copy of the message, including all the headers. ------ Return-path: Received: from XXXXXXXX by XXXXXXXX with local (Exim 4.84) (envelope-from ) id 1YLDXe-004HU8-7I for XXXXXXXX@XXXXXXXX; Tue, 10 Feb 2015 08:20:02 -0800 From: root@XXXXXXXX (Cron Daemon) To: XXXXXXXX@XXXXXXXX Subject: Cron php /home/XXXXXXXX/public_html/clientes/bb-cron.php Content-Type: text/plain; charset=UTF-8 Auto-Submitted: auto-generated X-Cron-Env: X-Cron-Env: X-Cron-Env: X-Cron-Env: X-Cron-Env: X-Cron-Env: Message-Id: Date: Tue, 10 Feb 2015 08:20:02 -0800 X-Powered-By: PHP/5.4.36 Set-Cookie: BOXSID=15d8061e222ad11ce074c777cc6f28ec; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-type: text/html
I remember that sometime ago I've had a similar issue and I've changed something somewhere but I can't recall how I've done this, how can I disable this from happening?

• 

  hgrg

  • February 26, 2015 08:40

  you have a spammer user sending huge volumes of email with this script: public_html/clientes/bb-cron.php now i see its likely to be a boxbilling install..

  0
• 

  cPanelMichael

  • February 26, 2015 13:00

  Hello :) It's normal for cron jobs to run from a jailed shell environment. You should ensure the account removes the mailing script if it's ending out SPAM, or suspend the account to prevent that behavior. Thank you.

  0
• 

  Leriss

  • February 26, 2015 13:40

  ]Hello :) It's normal for cron jobs to run from a jailed shell environment. You should ensure the account removes the mailing script if it's ending out SPAM, or suspend the account to prevent that behavior. Thank you.

  
  Hello, I'm pretty sure I've had the same situation where those crons were going to root@hostname and filling up in the mail queue, however I've set something somewhere and they stopped appearing, could you what could be the option since I've forgot?

  0
• 

  cPanelMichael

  • February 26, 2015 15:10

  ]Hello, I'm pretty sure I've had the same situation where those crons were going to root@hostname and filling up in the mail queue, however I've set something somewhere and they stopped appearing, could you what could be the option since I've forgot?

  
  Could you elaborate on what the option actually did or what behavior it changed? Did it send the root email elsewhere? Thank you.

  0

Please sign in to leave a comment.