Spam mail from localhost

JoaoTojo

• November 05, 2015 10:37

Hello, For the last days my server has been flooded with spam, approximately 3000 sent mails per hour, from our mail domain with random non-existent accounts through the localhost bypassing any security configuration. Here is a screenshot from the details of one of the mails sent: ]http://i.imgur.com/qm4WXaM.png
How can I block this kind of spam and how can I detect the root of this malware? Thanks you in advance for the response. Best regards, Jo"o

• 

  cPanelMichael

  • November 05, 2015 17:49

  Hello :) The following document is a good place to start: How to Prevent Email Abuse - cPanel Knowledge Base - cPanel Documentation You can also use a command like this to see if there are any directories with scripts sending out excessive amounts of email:
  awk '$3 ~ /^cwd/{print $3}' /var/log/exim_mainlog | sort | uniq -c | sed "s|^ *||g" | sort -nr
  Thank you.

  0

Please sign in to leave a comment.