RE: [cobalt-users] severe problem

["Jolley, Carl" <Carl.Jolley@xxxxxxx>]

-----Original Message-----
From: Randy Davis 
Sent: Thursday, July 11, 2002 6:05 PM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: [cobalt-users] severe problem


Any help would greatly be appreciated!  We have an emergency problem that I
would appreciate any assistance in fixing.  A user account on the system is
the user associated with a mass amount of spam email going out.  He isn't
even logged into the system and I know for a fact he didn't sent this stuff
out.  I've tried to clear the mail queue and shut down sendmail for a while,
but then all of a sudden the emails will be back filling up the queue again.
I've got ssh running on the box and the account they used doesn't have any
admin priv.  Any advice or suggestions????
---------------------------------

Find out how the mail is being sent out.
How do you know he didn't send it out or
cause it to be sent out?

An ordinary user with the ability to write
a perl script or even a shell script can
generate and send lots of e-mails. They don't
have to have any special privlegges to do it 
and they don't even have to be logged in when
its happening.