LxCenter Forum: Lxadmin 6.0 Feature request » Some way to easier find web script spamming

HyperVM & Kloxo Support

Forum

Members

Help

Home

Home » Archive » LxAdmin » Lxadmin 6.0 Feature request » Some way to easier find web script spamming(For when you cannot use suphp)

Show: Today's Messages :: Show Polls :: Message Navigator

Some way to easier find web script spamming [message #56730]

Thu, 19 February 2009 15:10

com2

Messages: 1120
Registered: August 2007
Location: Spain

Senior Master
Developer

I tried to activate suphp on my server, but I get the error 500 everywhere. I don't want to bother the clients go through a painful process.

Then I found this idea

Could this be implemented?

Report message to a moderator

Re: Some way to easier find web script spamming [message #56772 is a reply to message #56730]

Thu, 19 February 2009 20:57

Lxhelp
Messages: 23691
Registered: July 2006

The Champion

This is there now. Update to the latest, and then do:

 
 /script/fixweb

On Thu, Feb 19, 2009 at 08:10:10PM -0000, com2 wrote:
>
>
> I tried to activate suphp on my server, but I get the error 500 everywhere. I don't want to bother the clients go through a painful process.
>
> Then I found http://forums.theplanet.com/index.php?showtopic=90590
>
> Could this be implemented?
>

Report message to a moderator

Re: Some way to easier find web script spamming [message #56882 is a reply to message #56730]

Fri, 20 February 2009 04:43

com2

Messages: 1120
Registered: August 2007
Location: Spain

Senior Master
Developer

Thank you very much. With this system it was easy to identify the user. I was still thinking it was the web mail, but in the end I identified it was just a client script.

The way I worked:

Normally Spam will cause a lot of mail queue. Go to the mail queue in Server > Mail queue
Identify a message with source and destination not on you server and subject that is likely to be a SPAM
check if apache has the same uid and identify the message number
go to /var/log/lxadmin/maillog and search for the msg number
look for the emailcop@ and see the domain that is responsible for the SPAM

You can also look directly for emailcop@ but then you will also find legitimate mails.

Report message to a moderator