Best Practices to stop outbound spam

Arkaic

• February 22, 2016 17:19

Hey there, Over the past few weeks I've caught multiple Wordpress installs on my server being the cause of sending out spam, outdated/vulnerable plugins etc. The sender emails are all fake i.e. firstname.surname@domain.com[/EMAIL] What are the best practices, for a server administrator (other than telling users to keep wordpress updated and secure), for preventing these emails from being sent? Is there a method to prevent outbound emails from email accounts that don't exist on the server? -SMTP_Block enabled. -Prevent "nobody" from sending mail -Max hourly emails per domain 120 Anything else to consider? (I've probably forgotten a few other settings I've changed to combat this!) Furthermore, is there a particular command or method to find the exact file being used to send out spam? I'm aware of the following which is very useful, however, is rather difficult if there are many php files in the directory and the spam script is conspicuously named. grep cwd /var/log/exim_mainlog | awk '/public_html/ {print $3}' | sort | uniq -c Thanks :)

• 

  24x7server

  • February 23, 2016 04:26

  Hello :), Please check the following thread :- How to Prevent Email Abuse - cPanel Knowledge Base - cPanel Documentation

  0
• 

  cPanelMichael

  • February 23, 2016 16:36

  Hello :) The document referenced in the previous response is a good place to start. As far as the command, you could try searching the files in those directories for strings related to email. For instance:
  grep mail /home/$user/public_html/script/*
  Thank you.

  0

Please sign in to leave a comment.