It appears some scripts is using my IP to send emails to people using their own emails.
Is there a way to restrict outgoing emails with exim4 only to know domains?
Regards
[ SpamCop V4.8.3 ] This message is brief for your comfort. Please use links below for details.
Email from 188.XXXXXXX / Fri, 11 Dec 2015 04:54:24 +0100 https://www.spamcop.net/w3m?i=z6391837494z290f0f8d4aa98c7c41ce332d3510f050z
[ Offending message ] Return-Path: cmpjp@yahoo.com Received: from bravotv.com ([188.xxxxxxxxx]) by mx-ha.gmx.net (mxgmx109) with ESMTP (Nemesis) id 0M2oCQ-1aPScY12qk-00sb64 for <x>; Fri, 11 Dec 2015 04:54:24 +0100 Received: from 104.226.228.188 by markgraf-von-meissen.de (via HTTP); Thu, 10 Dec 2015 21:52:56 -0600 Message-ID: 8263______________83.6@bravotv.com> From: “Maja Dietrich” ufmuqeabwmpckj@yahoo.com Reply-To: “Maja Dietrich” fazvjauytdhj@yahoo.com To: x Content-Type: text/html; Date: Thu, 10 Dec 2015 23:53:56 -0400 Importance: normal X-Priority: 3 Envelope-To: <x> Subject: *** GMX Spamverdacht *** System verdient fr DICH 12.593 Euro im Monat VOLLAUTOMATISCH X-GMX-Antispam: 5 (nemesis mail header analyzer); Detail=V3; X-GMX-Antivirus: 0 (no virus found) X-UI-Filterresults: junk:10;V01:K0:TeK7eDA6Dis=:Kzw27zjDaY6n/iHW2ZS+6jLypUcq 1ljgKZ+Gb0amU/scSQKmPvPZyNK6sU+p9JlFC8TerLYhqhAM8IXi8LbrZafBaPM4yXHm/IvEN AQuUp9Dp5vBIse4lHZiP3h6cnVFmvZ70ygVTOCrzfOq9zM2MUBh734FgCL78MrIaKtKZViz2Z 8OWI929JvrwnVZy/F+b9Sme8Uzm4Oc5xt66G7oycwbZ45rhChdOKkwIS9ZK9H0/uA3d/4+bGY M+u4KC2vUK6Vrwdj/YyNG/Ftc2XcJrMQ/LGFT8ZaMzvXEj6dv/6Cie/YERlQ/nYAHI/6TZTL+ rLJVfdFMUzqKEVejpSrFXCJyZNcjEkJw54jTtQg6CZwHfNshjKKfHXh0QGfG/1MBeyrVhL8AY Rq6lMevfcAyQShlrm4vZrMvaPSw9lNq3yo2sy1fJhROI4kcngfwcCcl/s3aK8aVMfC9nVYhQW suOdsa9eev1uvDQdJRLvMjJCURm0BxALe/SX+VsBAJ3IfVZt/mIBiyt0xTUJ3/Lgz5zzAT7od CafrBh5oc4Wwq2Sr7oadx/iKKlCco8/M8DCnI6f4QnKUo+8XYG2GS/u+mMlHtKsIfzQS/2+N1 YHthPJYVAikySqBmjaGrhMgIK5PJJ7kh5Hy0+etcyQStAAD7NwULtE2/ADcAjPJZo5YCNac/0 wq3CIkr3pkAqx10GeyQEzv2X8lo8mDRB8/mAIu447HiUER2xWcw5dIgyJFMlkvvlIAdkBwYFz lxMyBrRfX+GFZtzBZRak85GhyLCNwIoFI1DAWU4OX7zHWsBZTyC90pwT2szvQijBkebh3FxKz 1noNaKYj+zcFmftl69Dk75x+3LqgDDqAU/G/VraA6Wr+ht5EDP1JZ+V9GbL1ACWxlM2YH7nVx 18GYbuWsZrsdzOejLwTxgT1ANFlAwLGc5uHz86koEAk0IsO1Kg0HB8jLrscYOZRB0vs+lAgE3 qbxrTKdogt8WPIWQSWM1gfF1MFXJpKvNNZv3ymRVaUMyzGjIjtrx5o2uenFug/UZT+xV88fho WFIC7gm4rEGMmv96mIj5wkwUz6Jssgms+mWt14PhW3PpWN41gB7aQT22XUCdvoxrw6f0HiQpV hglohAg++ivOENiFv2ezQr5H+f44cHurnxlHe9SYSJ9p/W+pM9Cj/kb9CU5TP2sTn28sDndlr QPIzECpaTenSi50AZpfeZ21CgDB/+UN9okvGchKmOmvzmV9SxLCoOHNxlKPxqY+9Ps8uoXQxS wwepkXadHMJz3ItG3qk/KIovoUBGYFuNGd5Sd9urBVuzIZq+iijd+oC+9y+xrNK+yTm6x0trk 7hOkiH8GvFQXks74m1ku3QCYjaG0cwo8ZYkxduCwMehK5P7zoSh4nnDZMVa0bVv3dX34ywl95 AFpQLE/uJNQ4JxzGznnZq2uElaseO8R8XOs4JKhCwYbxapXlGvI0zg0bEqEpkeIm3nBzZ/p1n 2sr4HKwNv1GQiWEPPyMrYn7I1IdnmevIijYi5V2X3rHCir07Osl0SVqWkBb8aV+/NWRMtI+O4 Ku6Uxm+79AkjW6YrMrTXwLhOEVeTpusL2B/kd6GsTdonTd5jPtvEGCIAIJ/P6x50IndfaKmjb vOmFlj0a4NkcccHv8z6wR4G2QwPtwoYCsitM34Mkgq2Ojf+JT+Q95xLu95pjrmHERWPJOk2TM Th8uk2EabAyP+IVHv8ou62PnSqCJddHDB5SfCDZyuDg==
<html> <head> <meta http-equiv=“Content-Type” content=“text/html; charset=utf-8” /> <title>rbml</title> </head>
<body> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Hallo,</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>wie geht es dir? Wollte dich anrufen, habe aber wahrscheinlich deine aktuelle Nummer nicht mehr!</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Ich muss dir unbedingt was zeigen. Ich verdiene hiermit seit 3 Monaten konstant nebenberuflich über 4000€ im Monat. Allen anderen denen ich das gezeigt habe, verdienen genau so viel.</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Ich bin kein Profi, aber das kann ich(JEDER).<br />DU auch. Probiere es du hast nichts zu verlieren.</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Du weißt, ich habe noch nie etwas empfohlen, dass nicht funktioniert hat.<br /></span></p> <p> </p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”><br />Hier der letzte Newsletter:</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”><strong>Bekannt aus: RTL, CNN, ARD, ZDF, FOX NEWS</strong></span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”><strong>ComputerBILD schreibt</strong>: " Testsieger bei Heimarbeit. Seriös und ein schnelles Einkommen von zu Hause aus kurzfristig möglich"</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”> </span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”><strong>96% der Mitglieder verdienen 6952 Euro im Monat</strong> und das von zu Hause aus. Und das schon nach 3 Monaten.</span></p> <p><a href=“http://www.schnellverdienen.ru”><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>>>Hier das Video anschauen<<</span></span></a></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Experten sind schockiert darüber, was hier mit purer Absicht</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>über viele Jahre hinweg verheimlicht wurde!</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>TV Sender berichten auf der ganzen Welt von einer neuen Welle</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>und die Elite läuft Sturm dagegen!</span></p> <p><a href=“http://www.geld24.ru”><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>>>Hier geht es zum Video<<</span></a></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Deshalb ist das folgende Video nur noch HEUTE online!</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”> </span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Insider packen aus, was niemals an die Öffentlichkeit</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>gelangen sollte! Wenn Sie diese Mail bekommen haben,</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>gehören Sie zu einer Elite, die nur noch heute</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>erfährt, was tatsächlich Sache ist!</span></p> <p><a href=“http://www.geheimertrick.ru”><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>>>Geheimes Video hier<<</span></a></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Geheimnisse der Elite sickern durch und wir, die 99%,</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>können nun endlich auf die Tricks der 1% zugreifen!</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Das Angebot ist 100% GRATIS - NUR noch heute!</span></p> <p><a href=“http://www.geldsofort24.ru”><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Schnell hier registrieren</span></span></a></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”> </span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Wir sehen uns gleich auf der Webseite wieder!</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”> </span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Ihr</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>Der Binary Code - Team </span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”> </span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>PS: Dieses Video wird Ihnen die Augen öffnen!</span></p> <p><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”> </span></p> <p><a href=“http://www.geldsofort24.ru”><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”><span style=“font-size: medium; font-family: arial, helvetica, sans-serif;”>>>>VIDEO<<<</span></span></a></p> <p><a href=“http://www.baresgeld.ru/unsubscribe.php?id=04171787952740”>Newsletter abmelden hier klicken</a></p> <p> </p> </body> </html>
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
It seems like your exim service is operating as an open relay. Can you please test this at http://mxtoolbox.com/diagnostic.aspx and report back?
If your exim is configured to be an open relay then look at http://serverfault.com/questions/455322/exim-prevent-mail-sent-by-relay for help. It needs to be addressed ASAP, lest you further contribute to the global spam problem…
In fact I am using exim4 and I do not see it as open relay testing with http://mxtoolbox.com/diagnostic.aspx.
Note: This issue started when I install phplist on the droplet I am having issues
Could this be related to phplist?
Regards
I have this problem too,
is it resolved when i use the exim4 , or if i uninstall phpmailer from the server?
Note: I didn’t have any Mail server installed or SMTP server Thanks,
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and AI-native businesses
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.