Re: [cobalt-users] severe problem

[Hans van Kilsdonk <hans@xxxxxxxxxxxxxx>]

Hello Randy,

Friday, July 12, 2002, 12:05:19 AM, you wrote:

RD> Any help would greatly be appreciated!  We have an emergency problem that I would appreciate any assistance in fixing.  A user account on the system is the user associated with a mass amount of
RD> spam email going out.  He isn't even logged into the system and I know for a fact he didn't sent this stuff out.  I've tried to clear the mail queue and shut down sendmail for a while, but then
RD> all of a sudden the emails will be back filling up the queue again.  I've got ssh running on the box and the account they used doesn't have any admin priv.  Any advice or suggestions????

Check if this user is running an old Matt's formmail.pl script. If the
version is < 1.92, then it might be used for spamming with that
particular user.

Replace the formmail with the formmail on this page:

http://www.scriptarchive.com/nms.html

-- 
Best regards,
 Hans                            mailto:hans@xxxxxxxxxxxxxx