exim load too much: emails from [email protected]

[nicsopon]

Normally, in Mail Qued Adminisration Sender Field, it will show the username&maindomain.TTL.

But today the server has 2 strange emails: <[email protected]> and <[email protected]> and it has some mails sent to these 2 emails from <> too but errors.

I can't find the user who sends the huge (134 pages) emails and make the server load reach 190%.

I have to stop it asap so I make exim unusable (chmod -Rf 000 /var/spool/exim/). It's back to normal.

Please advice what's happened and how to fix or prevent this situation.

Thanks & Best Regards

 

[scsi]

Just delete them.

 

[nicsopon]

It's impossible to follow to delete > 100 pages. I now stop the exim to find out the solutionl.

Can I config the server to receive mails without No SMTP Service (some scripts still need sendmail)? I will use ISP SMTP service instead.

 

[nobaloney]

Your problem is that spam is being sent through your server. Check your exim mainlog to find out if it's originating on your server or is somehow getting accepted by remote senders using your software.

If it's originating on your server, then simply suspend the user who's sending the spam. If your server is accepting it, find out why, since by default the exim.conf file included with DirectAdmin is NOT configured as an open relay.

You can delete hundreds of pages; you just have to understand how to run exim from the command line. You can delete the entire queue, which is probably what you should do.

I'm not sure what you mean by receiving email without SMTP service. You can't, of course, since the email service IS SMTP.

You can also hire us or someone else to find/fix the problem for you, but obviously that's not the cheapest way to go.

Jeff