Hey everybody, I once again have a problem with spam mails that are sent from my ISPConfig2 server. I used the perfect setup to install ISPConfig 2 on a Debian server. Everything is working great, only problem that I have is that for some reason there are still spam mails being sent though my server. I have set up a log file for emails that are submitted though forms, also have rkhunter running and the websites that are hosted seem to all have captcha scripts running in their contact forms. So today I got another abuse warning, is there a way of figuring out where this email has been submitted from so I can try to find the "hole" that is used? HTML: This is an email abuse report for an email message with the message-id of [email protected] received from IP address xxx.xxx.xxx.xxx on Wed, 15 Dec 2010 15:57:18 -0500 (EST) I'd be really thankful for some help so I won't get any more abuse reports. :-( Thanks in advance, Eddie
something else that will maybe help to solve the problem, my server ins running many apache processes like crazy, if I don't restart apache then my server will go up to like 30 or more ... right now I have these load averages which are way to high already load average: 4.01, 4.29, 4.67 This is what I did to see how many apache processes are running... HTML: blitz:/home/eddie# ps ax | grep apache 2059 ? S 0:01 /usr/sbin/apache2 -k start 3174 ? S 0:01 /usr/sbin/apache2 -k start 4138 ? S 0:01 /usr/sbin/apache2 -k start 25330 ? S 0:00 /usr/sbin/apache2 -k start 25332 ? S 0:00 /usr/sbin/apache2 -k start 25333 ? S 0:00 /usr/sbin/apache2 -k start 25335 ? S 0:00 /usr/sbin/apache2 -k start 25336 ? S 0:00 /usr/sbin/apache2 -k start 25361 ? S 0:00 /usr/sbin/apache2 -k start 25885 pts/0 R+ 0:00 grep apache 27687 ? Ss 0:01 /usr/sbin/apache2 -k start 27692 ? R 134:39 /usr/sbin/apache2 -k start 27712 ? R 136:02 /usr/sbin/apache2 -k start 27949 ? R 134:52 /usr/sbin/apache2 -k start 28373 ? R 125:52 /usr/sbin/apache2 -k start 31214 ? S 0:01 /usr/sbin/apache2 -k start ...maybe this helps to solve the problem. Thanks
Did you try this? http://www.howtoforge.com/how-to-log-emails-sent-with-phps-mail-function-to-detect-form-spam Did you try to finetune Apache? http://www.howtoforge.com/configuring_apache_for_maximum_performance
