cPanel, WHM and nobody emails

[matzah]

Hi

How are people dealing with shutting off the WHM setting where you shut off the "send as nobody" in order to keep the spammers off the server?

So may scripts and applicaitons use the nobody simply because cpanel used the SQL user fo nobody for the user logins of most scripts.

Many of my customers are getting this error when sending:
ail sent by user nobody being discarded due to sender restrictions in WHM->Tweak Settings

Any thoughts or suggestions?

Thanks

[JPC-Veena]

matzah,

If you have phpsuexec enabled on your vps, the php scripts of users will be executed as the original user and not 'nobody' and you can have the option "Prevent nobody from sending emails" enabled in tweak settings too.
You can find info in this forum about phpsuexec and contact support if you need help with it.

[thisisit3]

The answer is simple, they SHOULDNT be able to send emails as nobody. That WHM setting should be enabled.

All emails posted by your hosted accounts should be posted under their username, basically everything they do should be done under their username for security reasons.

Best thing to do is force your users to use SMTP authentication in all their PHP scripts that try to send emails, that way the PHP script will "login" with the email/password of an existing POP3 email and will send emails verified as a real hosted account on your server and not as nobody.