Page 1 of 1

My server has become where to send spam, plz help

Posted: Thu Sep 08, 2016 4:35 am
by ducnb
I use VPS with CentOS 6, current I cant send mail and this is content in "/var/log/exim/main.log" file.
2016-09-08 11:26:57 1bhk55-0000O9-Ol SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2303: host mta5.am0.yahoodns.net [63.250.192.45]: 421 4.7.0 [TS01] Messages from 128.199.75.48 temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html
2016-09-08 11:26:59 1bhk55-0000O9-Ol SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2303: host mta5.am0.yahoodns.net [98.138.112.38]: 421 4.7.0 [TS01] Messages from 128.199.75.48 temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html
2016-09-08 11:27:00 1bhk55-0000O9-Ol SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2303: host mta5.am0.yahoodns.net [98.136.216.26]: 421 4.7.0 [TS01] Messages from 128.199.75.48 temporarily deferred - 4.16.55.1; see http://postmaster.yahoo.com/errors/421-ts01.html
2016-09-08 11:27:02 1bhk55-0000O9-Ol SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2303: host mta5.am0.yahoodns.net [98.136.217.203]: 421 4.7.0 [TS01] Messages from 128.199.75.48 temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html
2016-09-08 11:27:04 1bhk55-0000O9-Ol SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2303: host mta5.am0.yahoodns.net [98.136.216.25]: 421 4.7.0 [TS01] Messages from 128.199.75.48 temporarily deferred - 4.16.55.1; see http://postmaster.yahoo.com/errors/421-ts01.html
2016-09-08 11:27:04 1bhk55-0000O9-Ol == [email protected] R=dnslookup T=remote_smtp defer (-45): SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2303: host mta5.am0.yahoodns.net [98.136.216.25]: 421 4.7.0 [TS01] Messages from 128.199.75.48 temporarily deferred - 4.16.55.1; see http://postmaster.yahoo.com/errors/421-ts01.html
2016-09-08 11:27:04 1bhm0D-0007kg-Cx Message is frozen
2016-09-08 11:27:04 1bhk0Q-00006c-GX Message is frozen
2016-09-08 11:27:04 1bhmiZ-0002ab-Fo == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2016-09-08 11:27:04 1bhg40-0002Pt-Jc Message is frozen
2016-09-08 11:27:04 1bhjuz-0008Df-20 Message is frozen
I dont have any email with my domain "@investa.vn" but why it show here ?
Please help me process this problem. I dont know more server, I only want use VPS to store my website with larger images and video.

Please help me.

Re: My server has become where to send spam, plz help

Posted: Wed Sep 14, 2016 1:30 pm
by skurudo
ducnb wrote:I dont have any email with my domain "@investa.vn" but why it show here ?
Somewhere may be a shell script, need to search for it.

Code: Select all

mailq
copy ID-message
and check with command

Code: Select all

exim -Mvh ID-message
look for php script
ducnb wrote:Please help me process this problem. I dont know more server, I only want use VPS to store my website with larger images and video.
or just disable clean mail queue and stop exim
exim -bp | exiqgrep -i | xargs exim -Mrm
service exim stop

Re: My server has become where to send spam, plz help

Posted: Wed Sep 28, 2016 5:06 pm
by jivko790
i got also 20000 massage on my server


did some one can help ?

Re: My server has become where to send spam, plz help

Posted: Thu Sep 29, 2016 6:04 am
by skurudo
XoXiLhJ0mn wrote: Further, I strongly advice you to configure the exim.conf to read and apply certain blocking config to prevent such spam incoming messages. Here, if you have never done this and want further help, let me know.
I would also love to see how you filter spam messanges with exim for incoming and outcoming.

Re: My server has become where to send spam, plz help

Posted: Thu Sep 29, 2016 7:51 am
by skurudo
XoXiLhJ0mn wrote: With your terminology "outcoming" you certainly, you do mean "outgoing" because "out" and "coming" are linguistic opposites.
Yes, you're right, it's my misspell.
XoXiLhJ0mn wrote:With your expression of interest on this topic, I will make a HOW-TO-guide - not only for you and the poster - for everyone. This I will do in a few days, when I have more time. In there, I will make detailed suggestions on this topic for use by this tiny and happy Vesta community.
That would be great. I'm sure your experience will help all. Thanks for sharing!

Re: My server has become where to send spam, plz help

Posted: Tue Oct 11, 2016 8:42 am
by ducnb
Thank you very much. :)