Control Web Panel

WebPanel => E-Mail => Topic started by: cristian_arg on November 25, 2016, 03:24:50 PM

Title: Spamming
Post by: cristian_arg on November 25, 2016, 03:24:50 PM

Hello
The server is currently sending spam, I would like to know how to detect the origin of spam sending in centos please.

Thank you

Title: Re: Spamming
Post by: cristian_arg on November 25, 2016, 06:30:16 PM

I found a script in php that sent the mails, I could do it, checking the file / var / mail / root
Is a file that has a lot of information regarding the mails, then use "grep" to search inside the file.

grep "php" root

And it is a matter of reviewing the archives.

Title: Re: Spamming
Post by: cristian_arg on November 25, 2016, 08:09:26 PM

Still spamming, any help from where I can check?
Thanks

Title: Re: Spamming
Post by: Jae on November 25, 2016, 10:41:28 PM

Check /var/log/mailog, if spam from user with sasl submitted, then you need change email password
if you think spam from phpmailer, you can try install "sendmail-wrapper" you can control over phpmail rate and have different log file.
Or if email not used, disable it completely..

Title: Re: Spamming
Post by: Administrator on November 30, 2016, 05:43:35 PM

probably you have hacked php scripts, you should check the mail queue and scripts, you also have info about this on the wiki
Don't forget you need to run mod_security "Comodo WAF" recommended to prevent your sites to be hacked

http://wiki.centos-webpanel.com/
http://wiki.centos-webpanel.com/postfix-mail-server-commands
http://wiki.centos-webpanel.com/how-to-resolve-spamming-issue-with-postfix
http://wiki.centos-webpanel.com/tracking-php-script-spam
http://wiki.centos-webpanel.com/track-spam-infected-scripts
http://wiki.centos-webpanel.com/mod_security-for-cwp
http://wiki.centos-webpanel.com/how-to-secure-your-website-from-hacking

Title: Re: Spamming
Post by: cristian_arg on December 27, 2016, 05:21:57 PM

Thank you!
The links were very helpful.