l i n u x - u s e r s - g r o u p - o f - d a v i s
Next Meeting:
July 7: Social gathering
Next Installfest:
Latest News:
Jun. 14: June LUGOD meeting cancelled
Page last updated:
2004 Sep 24 09:40

The following is an archive of a post made to our 'vox-tech mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox-tech] Spammers using my server
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox-tech] Spammers using my server

Assuming you have all of the latest patches, and the messages are from
apache, I would examine the CGI that you have on your system to see if any
are for form to mail gateway. If so, some of these may be the actual cause
of messages being relayed through you.

Looking for processes owned by apache which are not the web server is
another helpful thing. If the messages are being sent by the web server,
check the package fies to see if they are the same as the ones from the


Ehrhart, Jay said:
> This morning I had over 7000 emails in my Linux server's outbound queue
> which I deleted.  My firewall log shows over 20,000 emails went out with
> a
> SunTrust bank announce saying to login and enter your username and
> password.
> I do not see the emails coming in like I would in a relay.  How can I
> stop
> this or how are they doing this?
> My firewall using a SMTP proxy and only allows my domain in.  I run
> MailScanner on my Red Hat 3.0 mail server with Sendmail.  The box has
> the
> lastest patches from Red Hat.  I have Sendmail setup to accept only my
> domain email.
> The non-deliverable reports are coming from my Linux apache user.
> Non-deliverables usually come from root.  I am running apache on the
> server
> with forms.  The forms software is the latest version and patches.
> Can anybody help on this?
> Thanks,
> Jay
> Jay Ehrhart
> _______________________________________________
> vox-tech mailing list
> vox-tech@lists.lugod.org
> http://lists.lugod.org/mailman/listinfo/vox-tech

vox-tech mailing list

LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
Appahost Applications
For a significant contribution towards our projector, and a generous donation to allow us to continue meeting at the Davis Library.