My server is sending SPAM

Report · Jan 16, 2008

Hi All,

I understand that this isn't a regular sort of question for this forum but I
am a little desperate for a resolution to this and wondered if anyone has
had a similar experience.

I have a Windows 2003 VPS web server that is constantly attempting to send
spam to Taiwan email addresses. I am presuming that these emails are being
generated from a script on the server as I have checked for an open relay
and this seems secure.

Has anyone had a similar experience and if so, what was the remedy? The
sheer volume of these spam sends is now causing issues on the server so I
need to resolve this asap.

Thanks.

Report · Jan 16, 2008

Well, I'd move servers immediately before your domain is blacklisted as
spammer and/or your server is blacklisted (which most hosting companies
will dump you at this point, without notice) - and I'd search all of my
files to see what is causing the email to happen.

Paul Davis
http://www.kaosweaver.com/
Visit us for dozens of useful Dreamweaver Extensions.

http://www.communitymx.com/
Partner at Community MX - Extend your knowledge

Pat Shaw wrote:
> Hi All,
>
> I understand that this isn't a regular sort of question for this forum but I
> am a little desperate for a resolution to this and wondered if anyone has
> had a similar experience.
>
> I have a Windows 2003 VPS web server that is constantly attempting to send
> spam to Taiwan email addresses. I am presuming that these emails are being
> generated from a script on the server as I have checked for an open relay
> and this seems secure.
>
> Has anyone had a similar experience and if so, what was the remedy? The
> sheer volume of these spam sends is now causing issues on the server so I
> need to resolve this asap.
>
> Thanks.
>
>

Report · Jan 16, 2008

Pat Shaw wrote:
> Hi All,
>
> I understand that this isn't a regular sort of question for this forum but I
> am a little desperate for a resolution to this and wondered if anyone has
> had a similar experience.
>
> I have a Windows 2003 VPS web server that is constantly attempting to send
> spam to Taiwan email addresses. I am presuming that these emails are being
> generated from a script on the server as I have checked for an open relay
> and this seems secure.
>
> Has anyone had a similar experience and if so, what was the remedy? The
> sheer volume of these spam sends is now causing issues on the server so I
> need to resolve this asap.

It sounds like your server has been compromised. Take it off line,
reformat and rebuild.

Steve

Report · Jan 21, 2008

change the default outgoing port and require authentication of your incoming and outgoing mail ASAP.

If you've been "black listed" then your already dead in the water. Find a new server with a new IP, use new ports, and authenticate your mail server requests, and use a better firewall while you're at it.