Spam issues

D

dranelli

Verified User
Joined
Jun 30, 2011
Messages
6
Hello,

I have often spam issues on my servers with DA control panel.
My customers use CMS like Joomla or WordPress and these applications are often compromised and send spam.

Sometimes i can find the spam user via the 'Mail Queue Administration' link.
But more often it is not possible to find the spam user in the messages of the Mail Queue Administration.

So, is there a way to find the spam users on DA?
May you help me, please?

Thank you in advance.

Regards,

George
 
Hell,

You might follow all recommendations or only a part of them:

1. Disable PHP mail() for all users and allow it only in individual order.

2. Switch to use of mod_suphp or mod_ruid

3. Enable daily limits on outgoing emails on per user bases.

4. Use and read (store for any long period) eximstats every day

5. Etc.
 
My recollection is that for some time now a patch has been added (not sure to where) that puts the sending account username into the headers into all outgoing email sent from the server using PHP. I know it's on my servers.

If I'm right, and everyone has it as part of updates or new installs, then you can find out the user sending the spam even if you've only got one example email to go by, or from some log searching.

I know this works for me.

Am I right? Or are my installs using something I came up with some time ago, put into my workflow, and forgot about?

Anyone know?

Jeff
 
You're right about the patch, it comes by default, if option is enabled in custombuild. But in my practice the patch is useless until you've got such a letter and read its headers.
 
Thank you for your help.

How can i check if the patch is enabled in custombuild?

George
 
I checked my options.conf file and it contains only the following code:

#PHP settings. default_php possible values - 4 or 5, php5_ver - 5.2 or 5.3
default_php=5
php5_ver=5.2
php4_cli=no
php4_cgi=no
php5_cli=no
php5_cgi=yes
zend=yes

#Possible values - 5.0, 5.1
mysql=5.1
mysql_inst=yes
mysql_backup=yes

#Possible values - 1.3, 2.0 or 2.2
apache_ver=2.2

#Web applications
phpmyadmin=yes
Click to expand...

How can i add the patch that puts the sending account username into the headers of all outgoing emails?
 
Code: 
cd /usr/local/directadmin/custombuild
./build update
./build set mail-header-patch yes
./build php n

Please note, if you need some hands to do it for you, send me a PM, for some dollars I'll do the job.
 
You must log in or register to reply here.
Back
Top