Skip to main content

Comments

3 comments

  • cPanelMichael
    Hello, The best place to start is to review the message headers of one of those messages to see if you can find more information on the source of the email. At that point, you can take steps to suspend the account or delete the offending script. Thank you.
    0
  • obka
    Hello, The best place to start is to review the message headers of one of those messages to see if you can find more information on the source of the email. At that point, you can take steps to suspend the account or delete the offending script. Thank you.

    this account have a fake mail address ; not valid ! cant find any script on this account can i edit exim ? !
    0
  • TheDjinn
    Log into your server
    vi /var/log/exim_mainlog
    Look at the precise date and time that the offending emails are being sent out. You should be able to see the IP of the relay used. Blacklist the IP address or addresses. I recommend getting Mailscanner and Configserver Firewall if you haven't already. It will make these issues much easier to resolve and prevent. I also recommend you read through this
    0

Please sign in to leave a comment.