I am running Ubuntu with Webmin / VirtualMin
And I started getting this issue with thousands of emails coming from
www-data which is Apache.. somehow from a virtual site.
How can I disable this feature. I want site users to use SMTP that is created and avoid using the sendmail or any other tricks that a injected shell or script could give a malicious user access too?
I use postfix but stopped it for now. The queue still build up with postfix disabled.