Thread

Hey Guys & Girls,

So recently we have had a spamming issue on our server, tracing it back we found the spammer is using the nobody account to send the spam through our server.

I found in WHM the ” Prevent “nobody” from sending mail ” Setting and enabled it.

The issue is when this setting is on all mail from the Communication Tool and from the Freeform module in Expression Engine is also being blocked and not being received on the other end.

Is it possible to change EE to user another account instead of ” nobody “?

what would be the best course of action?

Just setup a regular smtp account, and enable EE to use it:

CP -> Admin -> Email Configuration

You’ve got settings to send email via smtp, sendmail or php there.

Eh, welcome to the world of WHM/Cpanel which is an entirely crappy and insecure piece of hosting software.

It’s been years since I’ve bothered with it, but if you’re going to prevent “nobody” from sending out mail. You’re going to want to at-least enable the use of phpsuexec and suexec (or whatever equivalent tactic they’re using to ‘secure’ php these-days). Effectively, you want your php scripts to be run under your user account, which will allow you to utilise php mail() like normal.

However if you’re managing your own web-server, and you’ve already had a spammer on the lose - throw a bit of money at a component server administrator and have them secure the box. You’re going to be in a world of hurt if you’re hosting other sites on this box and have little idea what security ramifications you’ve opened yourself up to by using WHM/Cpanel.