CSF authrelay messages

Hello guys,

I am getting a lot of following authrelay messages from csf where authrelay is being sent from different IP addresses:

Time: Thu Apr 17 05:19:32 2014 -0500
Type: AUTHRELAY, Remote IP - 5.143.61.226 (RU/Russian Federation/5-143-61-226.dynamic.primorye.net.ru)
Count: 51 emails relayed
Blocked: Temporary Block

Sample of the first 10 emails:

2014-04-17 05:18:50 1WajP7-003CH5-GH <= jovik@hosteddomain.com H=(adfrbvmjvp) [5.143.61.226]:50369 P=esmtpa A=dovecot_login:jobs@hosteddomain.com S=571 T="spammy subject" for xxx@yahoo.com xxx@yahoo.com xxx@yahoo.com xxx@gmail.com xxx@gmail.com xxx@gmail.com
I have already set the csf mail limit per account to 50 but the authrelay does not seem to check that but instead it limits mails sent per IP addresses.

Which really messes up outgoing spam settings.

Because someone hacks one email id and then simply use multiple IP addresses to send spam messages.

So is there a way to stop this?

Also why the 50 per account limit (from cpanel tweak settings) is not implemented over these emails?

 

 

 

 

Top