Spammer sending mail through our server.

[wdalessi]

Hello,

I have startd to receive returned emails from various domains that we are not sending out.

The headers are forged like [email protected]

This just started 2 days ago but they are all spam email from these mass emeil spam people.

How can I prevet them from relaying through our server.

I see the emails going through ESMTP? or whatever and they seem to come from dynamic ip addresses.

I see no settings in DirectAdmin to fix this.

Thanks Bill D.

 

[nobaloney]

By default DA's mailserver is closed against relaying.

One of your clients may have installed something that relays mail coming in on another port; perhaps port 80, by writing a php program to do the relaying.

Or perhaps it's not going through your server at all, but someone is just spoofing your domain and some dumb software is responding to it.

The only way to check is to carefully search your mainlog log.

Jeff