#1
  1. No Profile Picture
    Junior Member
    Devshed Newbie (0 - 499 posts)

    Join Date
    Dec 2003
    Posts
    1
    Rep Power
    0

    Qmail done remote email@aol.com


    It seems that somebody is using the server for spamming.

    We read the mail queue and found this:

    done remote dod1500@aol.com
    done remote sammybrini@aol.com
    done remote ahalflitmoon@aol.com
    done remote gilly3333@aol.com
    done remote wuzup1237@aol.com
    done remote breedable@aol.com
    done remote lklponies8@aol.com
    done remote masthe2000@aol.com
    done remote disgulcrazy@aol.com
    done remote teachroe@aol.com
    done remote dbgtn@aol.com
    done remote ahalfenger@aol.com
    done remote wildchild99@aol.com
    done remote breeda52@aol.com
    done remote ctikalsky@aol.com
    done remote christina2411@aol.com

    There around 4000 messages in the Qmail queue waiting to go out. We had to block entirely port 25.

    We have "SMTP Authentication enabled" and there are no indications that formmail is running on our server.

    Any inputs?

    Thanks

    Service
  2. #2
  3. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jan 2001
    Posts
    4
    Rep Power
    0
    We have "SMTP Authentication enabled"
    That was the problem. So which exact smtp-auth patch did you use? Anyhow start here.

IMN logo majestic logo threadwatch logo seochat tools logo