How do you dump spam?

[jbp2003]

Can somebody tell me how to dump spam(mail returned to my domain using a spoofed address) that has built up? Somebody (or a group) in Brazil keeps using a spoofed return address on their spam that returns bounced mail to my domain. Of course, it ends up in the default account and quite frankly I got tired of downloading 200+ pieces of bounced spam a day, so I set up an account using his/their favorite spoofed user name-"uwi114g3t". I let it build up and then deleted the account hoping to just get rid of the spam, but when I re-set up the account all of the messages showed up again, all 14,000+ of them.
I've searched the server looking for these messages but can't find them. I've got better things to do than download all of them just to delete them, and that web mail interface is so slow and clunky it's unusable- and I'm using broadband.
Why can't I just delete the default mail account and bounce all unrouted mail (invalid addresses, etc.) sent to my domain anyway? I was able to do that on a previous webhost. I hope nobody believes that stuff about how it wastes a spammers time 'cuz they think they got good addresses if you collect their bounced mail. What a bunch of hooey. It has the opposite effect, they send more spam!
If they're using a spoofed return address, do you really think they care about how any invalid addresses they have?
During the first few days of a month, the number of bounced mails finding their way to the "catch-all"account exceeds 500/day! Obviously those places can bounce mail with incorrect addresses, why can't I?
Bottom line is, I'd like to get the 75MB of bounced spam off of the server without downloading it through my pop3 reader. Any ideas? Thanks.
Jeff

[Vin DSL]

Originally posted by jbp2003
Can somebody tell me how to dump spam(mail returned to my domain using a spoofed address) that has built up? Somebody (or a group) in Brazil keeps using a spoofed return address on their spam that returns bounced mail to my domain...

Agrh... those %!(@&^ Brazilians again. All they teach them in Brazilian schools is how to hack sites and send spam. I have been looking for a way, during the last week or two, to block all IP's in Brazil, and I'm not alone in this. There is no reason for anyone from Brazil to even get on our web sites in the first place. So, when I figure out how to block access, I'll pass it along to you...

[Vin DSL]

In case you ppl think I'm BS'ing you, check this out:

http://www.google.com/search?hl=en&l...ian+hackers%22

[jbp2003]

Well, fortunately, they haven't wasted their time trying to hack my sites (yet), but oh..my..God can they ever send the spam. They're not actually utilizing the server to send it, just as a "reply to" dumping ground for their spam. Heck, they're even spamming people to buy horse back riding adventures in Montana, of all things. Oh, well, at least thier women are hot, that is, the ones that have been introduced to a razor, if you get my drift. It seems everyone over there can grow a mustache.
Back to my main question: Is the only way for me to get that 75MB (probably 85MB now) of spam off the server is to download all 14,000+ messages with Eudora and then delete them?
And is there no way for me to kill the default email address? Curses to whoever thought a "catch-all" mailbox was a good idea.
And double curses to anyone who has ever bought anything off of spam, or a popup ad for that matter.
Here's to hoping I don't have to download all those messages! (Gulp).

Jeff
P.S. You're right--I read some of those articles you included a link to, and hacking and spamming seems to be their most Holy Quest, for some reason.

[Connie]

Have you asked support for help about this? I'm sure they
can delete the files you need deleted, and they can probably
disable the catch all account for you.

My suggestion. Open a support ticket.

[Vin DSL]

Originally posted by jbp2003
...Back to my main question: Is the only way for me to get that 75MB (probably 85MB now) of spam off the server is to download all 14,000+ messages with Eudora and then delete them...?

Well, yeah, there are any number of ways to delete mails without downloading them. You can go in through the web interface and delete them off the server that way --- like ppl on Yahoo do, if they have a non-POP3 account. ICQ has a little proggy built into it that informs you when you have email waiting (sort of a pain to setup with authentication). It gives you the option of viewing them, ignoring them, deleting them, et cetera. You can shell into your account using WinSCP2, then go into the 'folders' for the individual accounts and delete the contents. This is the way I would do it.

There are probably dozens of ways to deleting mails without downloading them, but those are some ways that come to mind immediately...

[jbp2003]

I've tried deleting them right off the server, but I can't seem to find the "stash", nothing in the folder approaches the 75MB, I've deleted the account, the 'inbox.db" file and anything I could find resembling mail, but as soon as I set up the account, all of the old messages come back. The actual messages don't seem to be in the users folders.
The web interface is incredibly slow, even with cable broadband, and there are over 700 pages I'd have to go through, so I don't think that would be any faster than downloading them. But thanks for the ideas. I'll open a support ticket (as clssam suggested) and see if they can show me where these messages are so I can dump them (or have them dump them). Then I have to find a way to shut down that blasted catch-all, getting bounced mail at the rate of at least 1-2 per minute, and that's not an exaggeration.
Thanks again VinDSL and CLSSAM. I'll let you know what support suggests.

Jeff

[jason]

To disable the catch all, just put :fail: in to the CPanel field. That will send all of that spam bouncing away...

Mail going to your default address should be stored in /home/YOURUSERNAME/mail/inbox. Mail to an account you set up is probably in /home/YOURUSERNAME/MAILUSERNAME/inbox.

--Jason

[jbp2003]

Thanks for all of the info. No more catching spam for this guy.
And I did locate that huge cache of messages, so bye-bye to them too. Thanks again Jason, my life just got easier.

Jeff

[jason]

You're welcome!

--Jason