PHP Bulk mailer detection?

[Rave42]

I really like DirectAdmin but ive always had a problem with my clients uploading php bulk email scripts. Cpanel would warn me if one was uploaded is it possible to make directadmin do the same thing?

 

[nobaloney]

Can someone expand on this?

What would such a feature actually have to do to find bulk email scripts?

Jeff

 

[jmstacey]

Rave42,
Do you know if Cpanel monitored email output sources and identified them over time, or had a database of some sort of the most used scripts that fit that category?

 

[Rave42]

Rave42,
Do you know if Cpanel monitored email output sources and identified them over time, or had a database of some sort of the most used scripts that fit that category?

I know it didn’t monitor email output.

It somehow identified php commands that could be used to send any email and the server admin was notified immediately. So even if something like a Helpdesk program that emailed users was uploaded it would notify the admin. I imagine its done with grep somehow but I don’t know how it could be done efficiently.

 

[ballyn]

I suppose you could do this with the sendmail_path setting for the virtual host... just write a sendmail wrapper that would notify the admin before piping the mail off to the real executable?

Of course, if the script is talking smtp instead of calling mail() this wouldn't work. I'm not sure how else you'd catch calls to mail(), though.

 

[nobaloney]

I discussed this just this morning with one of the other posters on these forums.

He checks all new accounts, since most spammers are using bad credit cards and start spamming immediately so when the account is turned off they'll have been able to send some spam.

Jeff

 

[jmstacey]

Hey Jeff,
A little OT: He doesn't wait until payment has been received to create/activate the account?

 

[nobaloney]

You'd have to ask him that.

However I can make two points that occur with us:

1) we offer a one-month free trial on one of our hosting companies. We don't actually collect money until the second month.

2) we've seen stolen cards go through. It can and does happen.

Jeff