[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] user nobody sending email



> I have discovered in my logs that user
> 'nobody@localhost' is sending out email relayed from
> other domains that appears to be SPAM.  I have
> reviewed our settings but can't figure out how they
> are getting this to happen and I didn't find anything
> in the knowledgebase.  Any suggestions?

It's probably a exploited FormMail script that one of your clients are
using. SSH into your server and use the find or locate command to search for
formmail.

HTH,
j

-- 
http://www.bizmanuals.com