4

I have exim and dovecot on my server installed with directadmin. Some users use it to send spam.

How can i disabled this and remove my server from abuse.

info from mainlog

2010-07-07 13:00:16 1OWSEF-0002aw-Gh => info F= R=virtual_user T=virtual_localdelivery S=2252 2010-07-07 13:00:16 1OWSEF-0002aw-Gh Completed

and from message headers

1OWSbZ-000315-FM-H
mail 8 8
<[email protected]>
  1278501353 0
  -helo_name snt0-omc1-s49.snt0.hotmail.com
  -host_address 65.54.61.86.43647
  -host_name snt0-omc1-s49.snt0.hotmail.com
  -interface_address xxx.xxx.xxx.xxx
  -received_protocol esmtp
  -body_linecount 32
  -max_received_linelength 405
  -deliver_firsttime
  XX
  1
  info@****.com

  216P Received: from snt0-omc1-s49.snt0.hotmail.com ([65.54.61.86])
  by xxx.xxx.xxx.xxx with esmtp (Exim 4.69)
  (envelope-from <[email protected]>)
    id 1OWSbZ-000315-FM
    for info@****.com; Wed, 07 Jul 2010 13:15:53 +0200
    147P Received: from SNT101-W13 ([65.55.90.9]) by snt0-omc1-s49.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
    Mon, 5 Jul 2010 04:49:07 -0700
    058I Message-ID: <[email protected]>
      035* Return-Path: [email protected]
      088  Content-Type: multipart/alternative;
      boundary="_98a72e16-f4ad-4040-b007-d6c101b0731b_"
      036  X-Originating-IP: [182.114.208.252]
      045F From: isaac shasanya <[email protected]>
        028T To: <[email protected]>
          059  Subject: =?gb2312?Q?Dear_Frien?= =?gb2312?B?ZDog0OnS4L+o?=
          037  Date: Mon, 5 Jul 2010 11:49:07 +0000
          019  Importance: Normal
          018  MIME-Version: 1.0
          084  X-OriginalArrivalTime: 05 Jul 2010 11:49:07.0384 (UTC) FILETIME=[13115380:01CB1C38]
1

4 Answers 4

1

It looks this is an inbound email. It's not sent from your server, but from hotmail.com

Received: from snt0-omc1-s49.snt0.hotmail.com

Look the direction, the email was sent to the user info.., I guess it means [email protected] and it is your user, right?

OWSEF-0002aw-Gh => info

045F From: isaac shasanya 028T To:

0

How about spam filters?

http://marc.merlins.org/linux/exim/sa.html

http://johannes.sipsolutions.net/Projects/dovecot-antispam

0

Use an Outbound Email Security service. This will make sure that your users cannot mis-use your server to send SPAM.

0

If they target your users with Spam, install a Spam filter (as in James Santiago's post)

If your server is being used to send spam to other users you might be running an open relay.

1
  • +1 - I agree check that your only serving mail for authorised users!
    – JamesK
    Jul 28, 2010 at 14:57

Not the answer you're looking for? Browse other questions tagged .