My server has become where to send spam, plz help

[ducnb]

I use VPS with CentOS 6, current I cant send mail and this is content in "/var/log/exim/main.log" file.

2016-09-08 11:26:57 1bhk55-0000O9-Ol SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2303: host mta5.am0.yahoodns.net [63.250.192.45]: 421 4.7.0 [TS01] Messages from 128.199.75.48 temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html
2016-09-08 11:26:59 1bhk55-0000O9-Ol SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2303: host mta5.am0.yahoodns.net [98.138.112.38]: 421 4.7.0 [TS01] Messages from 128.199.75.48 temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html
2016-09-08 11:27:00 1bhk55-0000O9-Ol SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2303: host mta5.am0.yahoodns.net [98.136.216.26]: 421 4.7.0 [TS01] Messages from 128.199.75.48 temporarily deferred - 4.16.55.1; see http://postmaster.yahoo.com/errors/421-ts01.html
2016-09-08 11:27:02 1bhk55-0000O9-Ol SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2303: host mta5.am0.yahoodns.net [98.136.217.203]: 421 4.7.0 [TS01] Messages from 128.199.75.48 temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html
2016-09-08 11:27:04 1bhk55-0000O9-Ol SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2303: host mta5.am0.yahoodns.net [98.136.216.25]: 421 4.7.0 [TS01] Messages from 128.199.75.48 temporarily deferred - 4.16.55.1; see http://postmaster.yahoo.com/errors/421-ts01.html
2016-09-08 11:27:04 1bhk55-0000O9-Ol == [email protected] R=dnslookup T=remote_smtp defer (-45): SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2303: host mta5.am0.yahoodns.net [98.136.216.25]: 421 4.7.0 [TS01] Messages from 128.199.75.48 temporarily deferred - 4.16.55.1; see http://postmaster.yahoo.com/errors/421-ts01.html
2016-09-08 11:27:04 1bhm0D-0007kg-Cx Message is frozen
2016-09-08 11:27:04 1bhk0Q-00006c-GX Message is frozen
2016-09-08 11:27:04 1bhmiZ-0002ab-Fo == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2016-09-08 11:27:04 1bhg40-0002Pt-Jc Message is frozen
2016-09-08 11:27:04 1bhjuz-0008Df-20 Message is frozen

I dont have any email with my domain "@investa.vn" but why it show here ?
Please help me process this problem. I dont know more server, I only want use VPS to store my website with larger images and video.

Please help me.

[skurudo]

I dont have any email with my domain "@investa.vn" but why it show here ?

Somewhere may be a shell script, need to search for it.

Code: Select all

mailq

copy ID-message
and check with command

Code: Select all

exim -Mvh ID-message

look for php script

Please help me process this problem. I dont know more server, I only want use VPS to store my website with larger images and video.

or just disable clean mail queue and stop exim

exim -bp | exiqgrep -i | xargs exim -Mrm

service exim stop

[jivko790]

i got also 20000 massage on my server


did some one can help ?

[skurudo]

Further, I strongly advice you to configure the exim.conf to read and apply certain blocking config to prevent such spam incoming messages. Here, if you have never done this and want further help, let me know.

I would also love to see how you filter spam messanges with exim for incoming and outcoming.

[skurudo]

With your terminology "outcoming" you certainly, you do mean "outgoing" because "out" and "coming" are linguistic opposites.

Yes, you're right, it's my misspell.

With your expression of interest on this topic, I will make a HOW-TO-guide - not only for you and the poster - for everyone. This I will do in a few days, when I have more time. In there, I will make detailed suggestions on this topic for use by this tiny and happy Vesta community.

That would be great. I'm sure your experience will help all. Thanks for sharing!

[ducnb]

Thank you very much. :)