Tuesday, September 23, 2008

Finding spammers in the Plesk server having mailenable as mail server

Yup. Finding spammers in the Plesk server having mailenable as mail server is a easy(?) task, if you know what you are doing. I am never a good windows admin, but I understand something. Often now a days, I find windows permissions to be more cumbersome than Linux, making me using the Sysinternal's (now Microsoft's) swiss knife tools every time.

So here the issue was that, my client was not able to identify the spammer. I enabled Debugging (which was off) and then logging level was increased.

regedit and went to the below location to add a debug logging level.

[HKEY_LOCAL_MACHINE\SOFTWARE\Mail Enable\Mail Enable\Connectors\SMTP]
"Debug Logging Level"=dword:0000000a

And finally disabled the admin user of the default domain in mailenable. They were sending 1 email per 10 secs and that that details logging helped. Confirmed from mailenable.msc -> System -> localhost -> Connectors -> SMTP -> queue

No comments: