Portal Home > Knowledgebase > Articles Database > How do I track down spam coming FROM my server?


How do I track down spam coming FROM my server?




Posted by ZonePlate, 05-29-2007, 09:40 AM
Logwatch says I send out about 3k emails each day and that is a ridiculous amount. I use postfix and do not run any sort of relay, even for myself. I have IPB 2.2.2, Wordpress 2.0.4, and Gallery 2.x. How can I track down where these messages are originating from? Or perhaps I am reading my LogWatch file incorrectly? Any ideas?

Posted by Echelon, 05-29-2007, 10:40 AM
You also have to remember that IPB and Wordpress do send out emails as well. As for gallery, unless you have registration enabled, it shouldnt send emails. That might account for the emails that are trying to be sent.

Posted by ZonePlate, 05-29-2007, 10:45 AM
It is these entries in logwatch that make me nervous. I suppose it wouldn't take too many forum subscriptions to get to 3k. I'll look into that. But what about these bounces? My sites do not cater to foreign countries. Most of these destinations look like spam targets to me.

Posted by mwatkins, 05-29-2007, 11:09 AM
Why not show the complete set of log entries for one or two of these message transfer sessions (not just the action 550 entry but all that which led up to this). Some are simply going to be bounces. One system believes you are spamming them, it would appear. Give a little more detail..

Posted by ZonePlate, 05-29-2007, 11:23 AM
good idea. I'll do that when I have a chance. Thanks for your help.



Was this answer helpful?

Add to Favourites Add to Favourites    Print this Article Print this Article

Also Read