RE: [cobalt-users] How to stop SPAM senders?

[Jeroen Wunnink <jeroen@xxxxxxxxxxxxxx>]

See if it's actively happening, log into your box with an SSH shell, and do 
a: tail -f /var/log/maillog and see who's causing it.. (tail -f means: 
follow the tail of the log, this lets you see realtime entries added to the 
logs)

Big fat chance there's a Formmail.pl on a site of one of your customers 
which is below v1.3, which will allow open relaying, just look for that 
file if you can't find the exact source (might want to try tail -f 
/var/log/httpd/access too to see if there's an insane amount of POST 
actions are made through a script)

At 10:41 AM 5/5/2003 -0500, you wrote:
> I already had POP b4 SMTP turned on, and I am currently going through my
> logs.  Is there anything I should look for?
>
> Mark
>
>
> -----Original Message-----
> From: wcstaff [mailto:wcstaff@xxxxxxxxxxxx]
> Sent: Monday, May 05, 2003 10:27 AM
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: Re: [cobalt-users] How to stop SPAM senders?
>
>
>
>
> > What is the easiest way to determine how or who is sending spanm
> > through our server? We have gotten a report that someone is sending
> > spam through our server but I am not sure how to stop them or how they
>
> > are getting in.
> >
> > Suggestions would be great
> >
> > Mark
> >
> I would first turn on pop b4 SMTP mail relaying. Then they will not (or
> at least it will limit) be able to send using your sendmial, without
> verification. I would check the sendmail logs.
>
> Tom
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users



Met vriendelijke groet,

Jeroen Wunnink,
systeembeheer@xxxxxxxxxxxxxx

telefoon:+31 (035) 6285455              Postbus 1332
fax: +31 (035) 6838242                  1200 BH Hilversum

http://www.easyhosting.nl