email spam

W

wanren

Verified User
Joined
Mar 1, 2010
Messages
29
one of my users is sending a lot of emails:

Time: Thu Jul 22 07:53:47 2010 +0400
Type: LOCALRELAY, Local Account - mail
Count: 101 emails relayed
Blocked: No

Sample of the first 10 emails:
________________
I have edit /etc/virtual/limit file as 50, but it does not work...
 
Time: Thu Jul 22 07:53:47 2010 +0400
Type: LOCALRELAY, Local Account - mail
Count: 101 emails relayed
Blocked: No
Click to expand...

What is this?
 
This is some more part of the log:

Time: Thu Jul 22 13:23:00 2010 +0400
Type: LOCALRELAY, Local Account - apache
Count: 101 emails relayed
Blocked: No

Sample of the first 10 emails:

2010-07-22 12:39:58 1ObrJt-0008QW-9V <= [email protected] U=apache P=local S=78917 [email protected] T="Updates of WoW EU & US Servers Stock Level. 7/22/2010" from <[email protected]> for [email protected]
2010-07-22 12:40:29 1ObrKL-0000Na-3g <= [email protected] U=apache P=local S=78932 [email protected] T="Updates of WoW EU & US Servers Stock Level. 7/22/2010" from <[email protected]> for [email protected]
.......
 
wanren said:
Yes, he must be using local mail function to send email.
My problem is how to limit him?
Click to expand...
Unless WoW means World of Warcraft (?), and maybe he's using mailing list software......

If it was me, I'd politely ask him of what his intentions are, and that whatever he is doing is impacting on the server resources (even though that may not be the case).
 
Peter Laws said:
Unless WoW means World of Warcraft (?), and maybe he's using mailing list software......

If it was me, I'd politely ask him of what his intentions are, and that whatever he is doing is impacting on the server resources (even though that may not be the case).
Click to expand...

Thanks, Peter Laws. I have stopped the account as the customer did not reply my email!

I have a question that /etc/virtual/limit is used for limiting smtp outgoing emails not for local mail function?
 
wanren said:
I have a question that /etc/virtual/limit is used for limiting smtp outgoing emails not for local mail function?
Click to expand...
If you mean the php mail function or local exim mail? Not quite sure of either of them, not using it myself, maybe Floyd has the answer...
 
Note the exim id number 1ObrJt-0008QW-9V and see if that is in the user's usage file (/etc/virtual/usage/Username.bytes). I think this file gets cleared everyday so you will need to check it on the same day as the spam going out.

If its there then it is counted in the limit file. I believe it is counted but check just to make sure. It is also easy enough for you to test yourself. You don't have to wait for the spammer to test it for you.
 
floyd said:
Note the exim id number 1ObrJt-0008QW-9V and see if that is in the user's usage file (/etc/virtual/usage/Username.bytes). I think this file gets cleared everyday so you will need to check it on the same day as the spam going out.

If its there then it is counted in the limit file. I believe it is counted but check just to make sure. It is also easy enough for you to test yourself. You don't have to wait for the spammer to test it for you.
Click to expand...

Thanks for your suggestion:)
 
You must log in or register to reply here.
Back
Top