junk email

[JosHost]

hi

i am getting A LOT of " mail delivery error " messages on the [email protected] email

this is the main website email and i have a lot of accounts in my service, i think it is coming from the email accounts on the service since i am not using to much my own account, the error looks like this:

This is an automatically generated Delivery Status Notification

Delivery to the following recipient failed permanently:

[email protected]

Technical details of permanent failure:
PERM_FAILURE: SMTP Error (state 9): 550 Requested action not taken: mailbox unavailable


OR:


This is an automatically generated Delivery Status Notification

Delivery to the following recipient failed permanently:

[email protected]

Technical details of permanent failure:
PERM_FAILURE: SMTP Error (state 9): 550 "Unknown User"

----- Original message -----

OR:
This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:

[email protected]


------ This is a copy

I don't know why and where since " [email protected]" is not an account name, is someone Spamming from me??
what do i need to know and what can i do to eliminate this?

thanks
joseph.

 

[nobaloney]

It looks as if someone is sending email to nonexistent users from your return address, and that you're getting the bounces.

Jeff

 

[JosHost]

Hi jeff,

so you mean some one is sending emails from MY EMAIL? or just using it as return address so his gurbije will come back to my email??

do you know of any way to know who is sending this, if it from my server?
i have to many email acconts to count,
is their a way to detect some one that spam from my server??

please, i am getting more and more of this......

thank you
joseph

 

[nobaloney]

Perhaps someone is joejobbing you (link is to site with examples and explanation).

Perhaps someone is using your server (perhaps a compromised PHP program) to send spam.

Check your logs. Look to see if emails are going out from your server with the same subject or recipient addresses as you're getting returns from.

If there's a compromised program in your server the log will probably show the linux username as the sender; you can look through that user's files for the culprit.

Jeff