Help locating spam source

[briandelshasta]

Hi,
I have an ispconfig2 server running on the perfect debian setup. I have a large amount of spam generating from www-data@fqdn.com and I'm wondering if you can suggest the fastest way to track down the source?

I'm guessing mail sent as www-data is coming from some php script somewhere?

Any ideas?

[till]

Please take a look here:

http://www.howtoforge.com/how-to-log-emails-sent-with-phps-mail-function-to-detect-form-spam

[briandelshasta]

Excellent thank you!

[briandelshasta]

Is it easy to change this script for postfix rather than sendmail?

[briandelshasta]

My mistake. Postfix has a sendmail function...
And it's working, thank you!

[poisen]

Hello everybody,

I got the same problem with Spam mails being sent through my server and my provider keeps warning me and they are about to turn off the server if I figure out where the problem is. Sorry, but I tried setting up the script "How To Log Emails Sent With PHP's mail() Function To Detect Form Spam" that Till wrote, but I can't get it to work. Running Debian 5 with ISPConfig 2.2.37

I'd be happy if anybody can help me out here to stop these spammers!

Thanks a lot.