RE: [cobalt-developers] Shutting down SMTP

["Malcolm Wild" <cobaltsec@xxxxxxxxxxx>]

What exploit did they use ?

1.qpopper and send procmail mad
2.expose badly configured relay
3.root hack

each option has a different reponse
are they still using/abusing it
whats your actions to date? have you changed the root pwd and rebooted, etc

-----Original Message-----
From: cobalt-developers-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-developers-admin@xxxxxxxxxxxxxxx]On Behalf Of Eric
Marcussen
Sent: 29 January 2001 17:06
To: cobalt-developers@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-developers] Shutting down SMTP


  To All,

This past weekend, we had an individual hack into our email server (we use
a RAQ3) and send out a mass email.  Since none of our clients use our
server as an outgoing mail service (our SMTP), we would like to shut it
down.  We are new at this therefore we do not know how to turn it off.

My question has two parts:
	1)  If we shut down the SMTP,, even though no one uses it, would it have
an effect on our sites??

	2) How do we shut it down??

Thanx,
<<Eric>>

............................................
Eric Marcussen
System Administrator/Webmaster
S P H E R E S L L C   U S A
E-Commerce, Web Site Design
Site Hosting, Marketing & Management
...
Tel: 1.732.339.0700 . ideas@xxxxxxxxxxx
http://www.spheres.net
.
VERIO Authorized Solutions Provider
...
Official Advisor: Int'l Agency for
Economic Development, working with
the United Nations
............................................





_______________________________________________
cobalt-developers mailing list
cobalt-developers@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-developers