Re: [cobalt-users] Email Problem

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

On Wed, 17 Jul 2002 EricRyd@xxxxxxx wrote:

> A client is having a problem in sending email via smtp to cobalt qube.  No
> settings changed when it last changed.  Just stopped sending out of the
> blue.  Upon checking /var/log/maillog it appears he was relaying to 3 IP's
> outside his network.  Pop before smtp was enabled.  Checked firewall and
> somehow there were three rules giving them accept access for everything.
> Client didn't set this up nor did any other co-worker.  So I assumed he was
> hacked.  Deleted those rulse and blocked port 25 incoming on secondary
> interface as well as both web admin ports and telnet.  Right after doing
> that all of the relaying (which was happening every few seconds) stopped.
> Also had him change the admin password.
>
> Now when we go to send email it tells us: "lost input channel".  Any ideas
> on how to fix this?  I've searched but not come across too much.  Anything
> else we should check or block for safety reasons?
>

If the system is running sendmail you can't block port 25

--
Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
http://frontstreetnetworks.com | Website Hosts & SOHO Networks
229 Front Street, Ste.#C, New Haven, CT. 06513 United States
voice +1 302-785-0699 | fax +1 203-785-1787