Email limit not working
We lately had some accounts hacked (Wordpress) on our shared hosting server.
Scripts are uploaded that run as apache processes (index.php disquised a Joomla fies)
We immediaty limit those accounts to 1 email per hour.
This hacker found something to simply bypass this.
Its send mail from info@"other domains on server".
Apparently the limit does not apply then and lots of spam is be"ng send.
A lot more spam then usuall is send that way because the normal limit of 500 mails an hour is also bypassed because each domein can send 500 mails.
Is there a way to solve this?
Thanks!
-
Hello, I think your accounts sending mails using php mail script and due to that "email per hour" setting not work. Bellow command will show the exact path for the mail script. cwd /var/log/exim_mainlog|grep -v /var/spool|awk -F"cwd=" '{print $2}'|awk '{print $1}'|sort|uniq -c|sort -n0 -
So there's no way to make scripts sending email to respect the email limit? 0 -
Hello, Could you verify which PHP handler (e.g. DSO, suPHP) is enabled on the system for the version of PHP assigned to this account? Thank you. 0
Please sign in to leave a comment.
Comments
3 comments