spam issue

[wdieke]

I am having some spam issues. i can see in the exim main log huge amounts of spam coming by with

[email protected] U=apache P=local S=3891 T="PayPal Account Confirmation" from <[email protected]> for [email protected]


i think this is from the apache server and from a script somewhere ?

The problem with the logfiles is that i cannot find anything in it and looking for it is kinda hard since the logfiles are all split up.

Any clue's on this ?

 

[wdieke]

Ok first i installed the smtp limiter from Clayrabbit. I now know what user is causing the problem.

I guess a bad script ?

 

[opussupport]

I am also having this same issue and installed ClayRabbit's plugin, but either I am missing something, or it is not helping because the user account in the logs is apache.

It was helpful to halt the spam sent, but without knowing what site out of 179, all it does is prevent legitimate forms from sending their messages.

Is there a way that I can block outbound email with a specific From: address (in this case apache@domain)? That is the only thing that seperates it from the forms with specific From addresses.

Thanks,

Thomas