RE: [cobalt-users] Solarspeed's Spam Filter

["Manny Tau" <mtau@xxxxxxx>]

As always Dan and others, you've been quite helpful.

The 550 has been tested to not be an open relay, so I suspect that that
someone hacked in and running a spam script.

I have telnet turned off, and a pretty good alphanumeric password used for
SSH.

Which is the best log to look into re: 'others' getting into the box and
where is it located on a 550?

What have been the more commonly used spam scripts hackers are installing so
I can start the search?

thnx, Manny

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Dan Kriwitsky
Sent: Sunday, April 13, 2003 6:10 AM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: RE: [cobalt-users] Solarspeed's Spam Filter


> Been plugging up holes for some recent spam relaying thru my
> 550. Seems to be working to some degree, though still getting
> relayed, status=deferred according to my logs.
>
> Will installing Solarspeed's Spam Filter (Spam Assassin) help
> with cutting down the spam relaying?
>
> Can't tell from their website, but is this a .pkg for
> purchase/download like their AV-Suite?
>

It might help, but if you're not open to relay you shouldn't have a
problem. I think your problem is mail that was in your mailqueue before
you fixed the relay problem unless you have someone on your server
running a spam script.

--
C2003 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.


_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users