Re: [cobalt-users] Getting Hacked! Please HELP ASAP!

["Steven Werby" <steven-lists@xxxxxxxxxxxx>]

Casselman, Chad <chad.casselman@xxxxxxxxxxxxxxxxx> wrote:
> All of a sudden I start getting tons of bounce emails that I am not sending.
> I look at top and sendmail is going nutz and sending all these emails and
> most are bouncing.

Are you sure that they are originating on your server?  On several occasions
I've had spammers in China send millions of emails from a 3rd party server using
one of my addresses as the from address.  I got hundreds of thousands of bounced
messages, but none of the messages originated on my server.  I resorted to
disabling the email address by adding the following to /etc/virtusertable:

the_address@xxxxxxxxxx                                error:nouser

  So someone is using my system to spam thousands of
> people.  How can I turn sendmail off

/etc/rc.d/init.d/sendmail stop

> or get to the bottom of this.

Check your logs.  /var/log/maillog

--
Steven Werby {steven-lists@xxxxxxxxxxxx}