I have payed for premium install debian server but nothing work

I've talked with the person that made your installation, the setup that was made on your server is correct and the spam sending happens trough poorly coded websites that you moved onto this new server. If a website has security holes and these holes were used to send spam, then that's not an issue with the installation of the control panel, it's an issue in the website and you have to resolve that in the website.

There are several steps that you should do to secure your websites:

1) When the website uses a cms system like wordpress or joomla, then ensure that you have the latest version of the cms installed and update all plugins to their latest versions.
2) If the website are custom coded, then ask the developer of that site or web agency that maintains the site to review the access.log to find and fix the security holes.
3) Scan your server with maldetect regularily for malware: https://www.howtoforge.com/communit...-debian-6-with-ispconfig-3.58440/#post-284508
4) If you can't fix the code of your websites for whatever reason then you can try to add some additional security layer by installing an application firewall like mod_security for apache.

 

Ok, we'll see. Amazon blocks the spam trough external filters, so that you dont see the spam at amazon is no indication that your websites are safe. Send me the root login details by email. I will then tell you if the spam emails are send by one of your websites or if they are caused by a bad server installation.

 

Hi,

I checked your setup. The spam is send by one of the email
accounts on your server and the user is authenticated, so
he has a valid password for this email account.

Received: from mail.e...........h.com (unknown [39...........])
(Authenticated sender: [email protected])
by mail.b.......com (Postfix) with ESMTPSA id 351BA1205F1;
Mon, 9 Nov 2015 12:35:15 +0100 (CET)

So the account that sends the spam is: [email protected]

This means that there is no issue with your ISPConfig setup,
you have just a problem that either one of your customers
is sending spam or that someone got the password of his
account (e.g. when he used it over a insecure wlan connection,
in a internet cafe or his computer has a virus / malware that stole
the password).

To stop the spam sending, set a new and secure password for
the email account [email protected] in ISPConfig.

Then talk with the user that owns this account and ask him if he had
sent this spam intentionally, if not, then he should install a recent
antivirus solution on his desktop and scan it for viruses and tell him
to use smtps / imaps / pop3s to connect to the server so that
all connections are secured with ssl / tls. Thats a client side setting,
your server supports the secure connections out of the box.

Then you should delete all those spam mails from the mailqueue,
e.g. with this command:

mailq | tail -n +2 | awk 'BEGIN { RS = "" }
# $7=sender, $8=recipient1, $9=recipient2
{ if ($7 == "[email protected]")
print $1 }
' | tr -d '*!' | postsuper -d -

This is just one command and it deletes all email with sender address
[email protected] from the mailqueue.

I've send you the real email address name of the affected account be email.

So you see, you barked at the wrong tree by complaining that this is a problem of the installation service. If a password of an email account that you created after the server was installed is handed out to the wrong person or gets lost and is then used by someone to send spam, then this is is not an installation issue.