The Planet Forums > Problem with spammers

The Planet Forums > Control Panels > cPanel/WHM

FreDy

Feb 6 2006, 10:39 AM

Hi,

Today I've received an returned email, the error message was a link, I followed that link to a spampal webpage:

QUOTE

xxx.xxx.xxx.xxx listed in bl.spamcop.net (127.0.0.2)

If there are no reports of ongoing objectionable email from this system it will be delisted automatically in approximately 20 hours.
Causes of listing

* System has sent mail to SpamCop spam traps in the past week (spam traps are secret, no reports or evidence are provided by SpamCop)

Additional potential problems
(these factors do not directly result in spamcop listing)

* DNS error: xxx.xxx.xxx.xxx is xxx.xxx-xx-xxx.reverse.theplanet.com. but xxx.xxx-xx-xxx.reverse.theplanet.com. has no DNS information

Because of the above problems, express-delisting is not available

I think I havent received any attack from spammers, but I want to solve this issue and secure my SMTP server, what I have to do to secure it? I think that an SMTP authentication would be enough, but I don't know how activate it. I've searched in WHM options but I haven't found anything about this...

Any help would be great...

Thanks in advance

Ronny AcuNett

Feb 23 2006, 10:53 PM

CPanel/WHM has smtp authentication running by default.

Check to see if antirelayd is running on your server.

You did not receive attacks from spammers, spammers used your servers to send out spam.

This does not necessarily have anything to do with SMTP authentication. As a matter of fact, most spammers use exploited scripts to send out mass email via the local sendmail function.

I suggest compiling php with phpsuexec and disabling user nobody to track down the person responsible.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.