Qmail done remote email@aol.com

It seems that somebody is using the server for spamming.

We read the mail queue and found this:

done remote URL
done remote URL
done remote URL
done remote URL
done remote URL
done remote URL
done remote URL
done remote URL
done remote URL
done remote URL
done remote URL
done remote URL
done remote URL
done remote URL
done remote URL
done remote URL

There around 4000 messages in the Qmail queue waiting to go out. We had to block entirely port 25.

We have "SMTP Authentication enabled" and there are no indications that formmail is running on our server.

Any inputs?

Thanks

Service

That was the problem. So which exact smtp-auth patch did you use? Anyhow start here.