chasmcg - 1:32 pm on Feb 2, 2012 (gmt 0)

Someone was sending email from my server using the 'nobody' account. I stopped the user 'nobody' from being able to send emails in CPanel WHM. He is still sending the emails but now they are being bounced back to me.

Can anyone recommend someone that will look at my server to see how they are sending the emails? I suspect mysql but am not knowledgeable enough to find out how. Thanks.

If I am not in the correct forum please direct me to where I should be.