Mail queue grows up

[JuanCar]

My mail queue is growing up.
I've stopped qmail but the queue goes on growing
I must have an script running injecting mail in the queue, how can I find the script?
I looked the running process (ps ) but I can not find anything (there is a lot of process!!!!)
Thanks

 

[abdi]

I would start by disabling the PHP mail function.

Then:

http://kb.parallels.com/en/766

 

[JuanCar]

Looking maillog i've found several lines like

May 22 13:57:15 servidor smtp_auth: SMTP user [email protected] : logged in from triband-del-59.180.42.183.bol.net.in [59.180.42.183]

myname is a legal user name of the server

and all emails are from nonexisting mail accounts in my domain.

sendmail is filtered, so I think php doesn't send this emails.

And if I stopped qmail, why qmail queue grows? How to stop mail server at all?

Spam contains
Received: qmail 21199 invoked from network

So the mail is not created by a script (?)

And
Received: from ip-31-170-140-199.kichkas.net (HELO ciugbcphwbi) (31.170.140.199)
by mydomain.com with ESMTPA; 22 May 2014 18:58:40 +0200

But this IP is not the IP of my domain !!!!

I need help indeed.

Thanks

 

[InderS]

I will suggest you please try to change your mail account ([email protected]) password and monitor your server mail queue.

 

[HMoellendorf87]

You should enable the protocol for sendmail commands (via PHP)...