I get hundreds of spam from phpmailer script. how can i block

Mirsady
Posts: 2
Joined: Tue Nov 07, 2017 12:32 pm

I get hundreds of spam from phpmailer script. how can i block

Postby Mirsady » Tue Jan 30, 2018 9:32 am

Hello,

I get hundreds of spam from phpmailer script. and every IP adress or sender mail adres or sender domain is always different
but the only common points are the following information mail header

Code: Select all

X-PHP-Originating-Script: 310:class-phpmailer.php
Date: Tue, 30 Jan 2018 14:41:00 +0530
[b]X-Mailer: PHPMailer 5.2.22 (https://github.com/PHPMailer/PHPMailer)[/b]
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit


how can i block if mail header contain X-Mailer: PHPMailer for the entire server and domains.

twun
Posts: 9
Joined: Tue Dec 16, 2014 6:42 pm

Re: I get hundreds of spam from phpmailer script. how can i block

Postby twun » Wed Jan 31, 2018 12:13 pm

I am getting the same attack, would be interested in a good solution to block this before it hits the spam filter as the server is being overwhelmed currently.

Seppy
Posts: 31
Joined: Thu Apr 12, 2007 9:07 am

Re: I get hundreds of spam from phpmailer script. how can i block

Postby Seppy » Wed Jan 31, 2018 1:13 pm

Hi,
did you activate greylist?

twun
Posts: 9
Joined: Tue Dec 16, 2014 6:42 pm

Re: I get hundreds of spam from phpmailer script. how can i block

Postby twun » Wed Jan 31, 2018 4:51 pm

best solution i have so far is to create a Filter that checks Message Header for *https://github.com/PHPMailer/PHPMailer* and delete them. I have set the inbuilt mailenable filter to run before hitting my MTA spam filter so that i can clear out targeted attacks like this with out wasting resources on the MTA spam filter.

Who is online

Users browsing this forum: No registered users and 1 guest