stopping spam emails sent from ispconfig 2 server

Discussion in 'General' started by poisen, Dec 16, 2010.

  1. poisen

    poisen New Member

    Hey everybody,

    I once again have a problem with spam mails that are sent from my ISPConfig2 server. I used the perfect setup to install ISPConfig 2 on a Debian server. Everything is working great, only problem that I have is that for some reason there are still spam mails being sent though my server. I have set up a log file for emails that are submitted though forms, also have rkhunter running and the websites that are hosted seem to all have captcha scripts running in their contact forms.

    So today I got another abuse warning, is there a way of figuring out where this email has been submitted from so I can try to find the "hole" that is used?

    This is an email abuse report for an email message with the message-id of [email protected] received from IP address on Wed, 15 Dec 2010 15:57:18 -0500 (EST)
    I'd be really thankful for some help so I won't get any more abuse reports. :-(

    Thanks in advance,

  2. poisen

    poisen New Member

    something else that will maybe help to solve the problem, my server ins running many apache processes like crazy, if I don't restart apache then my server will go up to like 30 or more ... right now I have these load averages which are way to high already

    load average: 4.01, 4.29, 4.67

    This is what I did to see how many apache processes are running...

    blitz:/home/eddie# ps ax | grep apache
     2059 ?        S      0:01 /usr/sbin/apache2 -k start
     3174 ?        S      0:01 /usr/sbin/apache2 -k start
     4138 ?        S      0:01 /usr/sbin/apache2 -k start
    25330 ?        S      0:00 /usr/sbin/apache2 -k start
    25332 ?        S      0:00 /usr/sbin/apache2 -k start
    25333 ?        S      0:00 /usr/sbin/apache2 -k start
    25335 ?        S      0:00 /usr/sbin/apache2 -k start
    25336 ?        S      0:00 /usr/sbin/apache2 -k start
    25361 ?        S      0:00 /usr/sbin/apache2 -k start
    25885 pts/0    R+     0:00 grep apache
    27687 ?        Ss     0:01 /usr/sbin/apache2 -k start
    27692 ?        R    134:39 /usr/sbin/apache2 -k start
    27712 ?        R    136:02 /usr/sbin/apache2 -k start
    27949 ?        R    134:52 /usr/sbin/apache2 -k start
    28373 ?        R    125:52 /usr/sbin/apache2 -k start
    31214 ?        S      0:01 /usr/sbin/apache2 -k start
    ...maybe this helps to solve the problem. Thanks
  3. falko

    falko Super Moderator ISPConfig Developer

Share This Page