Being blamed for sending spam but I'm not. Can someone help with log entries?

openminds

• June 22, 2015 16:30

Hi all, My reseller host keeps blaming one of my accounts for sending spam who I know for a fact is not, at least not intentionally. I have done malware and virus scans on his only computer that connects via email, I have changed passwords, had my host scan the file system for malware, etc but it keeps happening. I am not a pro at this level and could use a little help. They sent me a log with multiples of the same entry. Can someone please help me understand what exactly what these entries mean?
2015-06-14 23:00:44 H=notmydomain1.eu [1.1.1.1]:56590 F= temporarily rejected RCPT : Could not complete sender verify callout 2015-06-14 23:02:03 H=notmydomain2.eu [2.2.2.2]:58783 F= temporarily rejected RCPT : Could not complete sender verify callout

• 

  openminds

  • June 23, 2015 02:34

  Here is another entry. There is a multitude of these, all having an email address in them that does not exist on my server, and they are all different:
  2015-06-22 10:13:07 H=static-ip-209-126-xxx-xx.inaddr.ip-pool.com (somedomain.us) [209.126.xxx.xx]:41321 F= temporarily rejected RCPT : Could not complete sender verify callout
  Isn't this an incoming email log entry?

  0
• 

  Infopro

  • June 23, 2015 09:35

  Do you have this enabled in WHM? Home "Service Configuration "Exim Configuration Manager, Mail tab: Sender Verification Callouts Use callouts to verify the existence of email senders. Exim will connect to the mail exchanger for a given address to verify it exists before accepting mail from it.
  Disabled is preferred. In your cPanel, Mail section, Default Address, where do you have all unrouted email for your domains going? "Discard the email while your server processes it by SMTP time with an error message." is preferred.

  0

Please sign in to leave a comment.