How STOP the SMTP relay external?

necesitopagina said 1 year, 10 months ago:

Recently, I am experiencing a lot of smtp relay spam. A spammer is using my smtp relay to send 2,000?s of spam each day, not to my hosting customers or domains, just sending spam to a spam email list using my smtp relay on my dedicated server purchased from godaddy who does not want to help with the problem. They rotate sending email to their email list. Does anybody know how to stop this assault without logging into the SSH? Why would godaddy lease a server vulnerable to spammers? And, not help on the issue?

I have SIMPLE PANEL CONTROL.

DaveD said 1 year, 10 months ago:

@necesitopagina

Relays are only utilized by mail coming directly from your server. As such, being able to use these relays to send spam would indicate that the party sending the spam messages is utilizing functionality provided by your server configuration. Since you are the administrator for the server, this is something that you would generally be required to address. However, you can contact our Server Support team by creating a trouble ticket and they may be able to assist you in addressing this. You can create a trouble ticket using the directions in this article:

http://support.godaddy.com/help/article/4596

wayan said 1 year, 10 months ago:

Help us help you. How did you determine that someone is sending spam through your server? Did you install any scripts that send email?

necesitopagina said 1 year, 10 months ago:

Someone may have had access is not as …

All e-mails came from apache @ localhost fact …

There is a solution?

DaveD said 1 year, 10 months ago:

@necesitopagina

How did you determine that these are spam though? Are you sure that the hosted sites aren’t just generating these emails? Do you also host email addresses? Have you reviewed your email logs?

necesitopagina said 1 year, 10 months ago:

My sites are hosted, because if so, the mail will be arriving in the mail some of the sites they have. And not a customer I report this. In addition to the logs tell me.

I harbor email addresses.

If you check the logs for that very reason I know the mail is sent to many addresses that do not know …

Sorry for my english, i speak spanish!

wayan said 1 year, 10 months ago:

Did anyone install a script that sends emails? If the script isn’t secure, anyone could use it to send emails.

necesitopagina said 1 year, 10 months ago:

I do not think anyone is any script installed. I can see nothing new.

DaveD said 1 year, 10 months ago:

@necesitopagina

Do you host actual email accounts? Perhaps one of those accounts was compromised? I found a thread that has some good suggestions that may help you track down the method used to send these mails:

http://x.co/tdss

necesitopagina said 1 year, 10 months ago:

no i no have email accounts? exist any form how check the sendmails but from server?

necesitopagina said 1 year, 10 months ago:

I encourage those who had this problem with post office, which check the folders for all their domains and have passwords difficult to verify in oscommerce, zentcat, joomla etc etc etc.

Thx godaddy, i solved my problem.

DaveD said 1 year, 10 months ago:

@necesitopagina

Great! Glad to hear you were able to get this resolved. If you have any other problems let us know and we’re happy to help with what we can.

hakanyurek said 11 months, 1 week ago:

Hi I am having the same issue and everything seems to be similar as necesitopagina identified above. I have a joomla site and everyday I have 1,000 emails sent from my server without my authorization causing my genuine messages to get stuck in que and get delivered in 3 4 days after I sent.

Server support guys have been very helpful but I am unable to receive a resolution yet.

Does the resolution only suggest to change the joomla login and make it secure? Or have I missed other curicial points?

Please help….

Gary A said 11 months, 1 week ago:

@hakanyurek

You will want to review the application you are using for your site for any ways users might be sending emails from your site. It might be something as simple as the password reset function being spammed. I recommend that you review your site and disable any extra functions that might send emails, and add CAPTCHAs to other areas, such as the password reset area, to prevent it from being spammed.

-Gary