spam mail in cpanel

hi all


from a few days i see that my queue is full up my hard drive...

so i go and investgate .. i found that there is a domain making my server as a spam gateway he send alot of mails to the exim server....


first i go and disable the forummail script...........


but i still see that he is sending when i come to read the header of the mail he sending i found this


152P Received: from root by host.myserver.com with local (Exim 3.36 #1)
id 19WP2n-0004d3-00


he is sending throw a script .. so how can i knew from where he is sending... i try to run

ps auwx |grep perl


to find if he is running a perl script... but didnt find any thing till now


soo any one have a solution for that .... of course i cant come all over the sites logs and read them.......

 

 

 

 

Top