need urgent help with spams!
Can someone help? i don't know who is using my server as spam. I have enabled SMTP Tweak in cPanel WHM but I am still getting spam sent from my server that amounts to almost hundreds of thousands of mails!
But I have
I suspect it is one of my user and suspended his account, when I run
tail /var/log/exim_mainlog,
it shows this:
"2005-12-25 02:03:41 fixed_login authenticator failed for (rigshow.com) [4.79.248.64]: 535 Incorrect authentication data (set_id="xxx")"
Does it mean that I have stopped the spam from this client?
Also does suspending his account in cPanel WHM means I suspend his emailing capability too? How can I more effectively suspend his emailing functions?
The spam email header is below, can someone tell me where is the spam generated from? will appreciate you guys help very much! I am really sick of having spams sent out from my server every now and then
""1Epv3P-0003ai-MF-H
root 0 0
<ldobbs@costrate.com>
1135375583 0
-helo_name rigshow.com
-host_address 4.79.248.64.2126
-host_name mx1.genutrust.com
-host_auth fixed_login
-interface_address xx.xx.xx.xx
-received_protocol esmtpa
-body_linecount 70
-auth_id xxx.xxx.com
XX
1
jh@2die4.com
183P Received: from mx1.genutrust.com ([4.79.248.64] helo=rigshow.com)
by xxx.com with esmtpa (Exim 4.52)
id 1Epv3P-0003ai-MF
for jh@2die4.com; Fri, 23 Dec 2005 23:06:24 +0100"
