[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] [RAQ 4] [Neomail] [open relay]
- Subject: Re: [cobalt-users] [RAQ 4] [Neomail] [open relay]
- From: Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu May 16 05:16:54 2002
- Organization: Front Street Networks LLC
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
On Thursday 16 May 2002 12:24 pm, Sean Chester wrote:
> On Thu, 16 May 2002 10:33:53 -0500, Jay Summers wrote:
> >>> Maybe FormMail ?
> >>
> >> wouldnt i have to have root privalages to open up the relay?
> >> .pkgs are the only thing i have installed as admin/root
> >
> >No. I think Gerald was suggesting one of your customers might be
> >using Matt
> >Wrights FormMail script which is very easy to exploit and send tons
> >of spam
> >through. Shell into your box and do a locate FormMail. Also, try
> >digging
> >around the Apache logs for signs of FormMail.
> >
>
> arha.. locate FormMail does produce 2 finds.
> perhaps this is the culprit?
Could be now look through /var/log/maillog and see if you see alot of
messages sent by localhost
--
Gerald Waugh
http://www.frontstreetnetworks.com :: Phone. [011] 203.785.0699
Front Street Networks LLC | SOHO Networks & Web Site Hosting
229 Front Street, Ste. #C, New Haven, CT, 06513-3203 United States