SMTP Relay Spam

One client reached maximum limit of emails sent today.

Her employee’s PC got virus and have been sending out spam emails non-stop.

To check which user is sending out bunch of emails, use this command:

ls -alS /etc/virtual/usage|grep -v byte

Check regularly with

tail -f /var/log/exim/mainlog

To fix this problem

  • Do “sa-update”
  • Check “Mail Queue Administration” in DA and clear them out
  • disable “da_popb4smtp” service if necessary
  • Scan the suspected PC
  • Limit email sent per day:
cd /etc/virtual

echo "200" > limit

cat limit