Spam Nightmare

[mischa]

I am a webdesigner and have reseller space on serversite1.com ,
2 of my sites are down, because they were apparently used to send spam. I know that the clients definately did not do this. The sites are www.valleyinthesun and www.walkandtalk.info.
I am fed up because they are still suspended although on my directadmin control panel they are unsuspended.
I need to know what to do exactly in plain english to stop spammers sending SPAM from these accounts and also I am getting very fed up with receiving 50 spam emails a day on investments, cialis, viagra and watches.........it is such a waste of time and energy, and my clients are mainly in Spain, spanish speaking..........
The spamassasin on the server doesn't make much difference.
I am seriously considering changing hosting company, but I need to know that the spam problem will not reoccur...........The support I am getting is only trickling through, they take ages to reply to my critical tickets, so hopefully I will get some more helpful answers here.


thank you
Mischa

The last message they sent me is here:

The accounts were suspended due to spamming. The proof is given below.

The account walkandtalk.info suspended because of large amount out mail sending. Following is the list of mail sent at a time

[root@server ~]# exim -Mvh 1Gegdn-0006kg-AI\par
1Gegdn-0006kg-AI-H\par
walktalk 1350 1351\par
\par
1162251243 0\par
-ident walktalk\par
-received_protocol local\par
-body_linecount 28\par
-auth_id walktalk\par
-auth_sender [email protected]\par
-allow_unqualified_recipient\par
-allow_unqualified_sender\par
-local\par
YY [email protected]\par
YY [email protected]\par
YY [email protected]\par
YY [email protected]\par
YY [email protected]\par
NN [email protected]\par
NN [email protected]\par
YY [email protected]\par
NN [email protected]\par
YN [email protected]\par
NN [email protected]\par
YY [email protected]\par
NY [email protected]\par
NN [email protected]\par
YY [email protected]\par
NN [email protected]\par
NN [email protected]\par
YY [email protected]\par
YY [email protected]\par
NY [email protected]\par
NN [email protected]\par
NY [email protected]\par
NN [email protected]\par
YY [email protected]\par
YY [email protected]\par
YY [email protected]\par
NN [email protected]\par
NN [email protected]\par
NY [email protected]\par
NN [email protected]\par
(.......... there were more .........etc)

178P Received: from walktalk by server.serversite1.com with local (Exim 4.60)\par
(envelope-from )\par
id 1Gegdn-0006kg-AI; Mon, 30 Oct 2006 18:34:03 -0500\par
033T To: [email protected]\par
038F From: [email protected] ()\par
018 Subject: consumed\par
044 Content-Transfer-Encoding: quoted-printable\par
025 Content-Type: text/plain\par
026 X-Mailer: Evolution/1.0.2\par
061 Subject: Weight loss has never been this convenient and easy\par
7966* bcc: [email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],\par
(......etc and more.......)


174P Received: from laguar by server.serversite1.com with local (Exim 4.60)\par
(envelope-from )\par
id 1GehFE-0001tf-QI; Mon, 30 Oct 2006 19:13:22 -0500\par
015* To: pedestrian\par
038T To: [email protected]\par
007F From:\par
032 Content-Transfer-Encoding: 7bit\par
025 Content-Type: text/plain\par
046 X-Mailer: Internet Mail Service (5.5.2654.89)\par
055 Subject: Celebrities and Scientists agree, for once...\par
7917* bcc: [email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],[email protected],\par
[email protected],[email protected],[email protected],\par
(......and more......etc)

 

[jjma]

Check there the forms on the sites, that a spammer can expoit, are not exploitable.

I had to take three forms of clients and redo them because spammers were using them to send tons of junk.

The forms would by pass spamassassin as they are being generated locally i.e on the server.

Good forms can be found here:

http://www.dbmasters.net/index.php?id=19

Jon

 

[xemaps]

For web form i suggest you to add a captcha
google it !