[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Email Problem



A client is having a problem in sending email via smtp to cobalt qube.  No
settings changed when it last changed.  Just stopped sending out of the
blue.  Upon checking /var/log/maillog it appears he was relaying to 3 IP's
outside his network.  Pop before smtp was enabled.  Checked firewall and
somehow there were three rules giving them accept access for everything.
Client didn't set this up nor did any other co-worker.  So I assumed he was
hacked.  Deleted those rulse and blocked port 25 incoming on secondary
interface as well as both web admin ports and telnet.  Right after doing
that all of the relaying (which was happening every few seconds) stopped.
Also had him change the admin password.

Now when we go to send email it tells us: "lost input channel".  Any ideas
on how to fix this?  I've searched but not come across too much.  Anything
else we should check or block for safety reasons?

Thanks,

Eric Rydberg