Zimbra Forums

Good day everyone,

I notice that there is one account which is named as (info@mydomain.com) spamming from our zimbra mail server. I checked this account on our accounts lists but it does not exist.

1. How can we find this account and delete it ?
2. Is there any commands that we can stop spamming from our mail server ?

Hope someone can help me. Thanks.

Hi,
You can follow this wiki: https://wiki.zimbra.com/wiki/Spamming_troubleshooting

Regards,
Minh.

Yes i followed it and check the users and already changed their passwords to strong ones.

The biggest issue is the non-existing account which is info@mydomain spamming from our zimbra. I tried to delete it in cli but it returns not exists.

Thanks

zimico wrote:Hi,
You can follow this wiki: https://wiki.zimbra.com/wiki/Spamming_troubleshooting

Regards,
Minh.

Hi,
If you know who is sending spam out, you should go and check/scan her/his PC/Laptop/Mobile for virus/malware. For example, if her/his PC is infected, malware/virus can use this PC (Outlook or other mail clients) to send out spam without knowing password.

Regards,
Minh.

bryllej8 wrote:Yes i followed it and check the users and already changed their passwords to strong ones.

One of the most important pieces of information is missing from your post, that's the ZCS version you have installed. Always post the full output of the following command (yes, sometimes it is important):
Have you checked your ZCS server for any odd/unknown process that may be running? Have you also checked your LAN for infected machines? Did you read the Administrators forum on an 'Exploit' that was infecting ZCS server? I'd suggest you also take a look at that thread.