![]() |
Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.
|
|
google unix.com
|
|||||||
| Forums | Register | Forum Rules | Links | Albums | FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
| Security Discuss UNIX and Linux computer and network security, cybersecurity, cyberattacks, IT security, CISSP, OWASP and more. |
More UNIX and Linux Forum Topics You Might Find Helpful
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| AWK and mailq | Retski | Shell Programming and Scripting | 2 | 12-16-2008 05:04 PM |
| mailserver | keliy1 | Linux | 1 | 12-02-2004 04:55 AM |
| mailq | tamemi | UNIX for Dummies Questions & Answers | 3 | 09-22-2003 08:53 AM |
| mailserver | Stormpie | IP Networking | 1 | 08-07-2002 01:35 PM |
| Mailserver Requirements | bache_gowda | UNIX for Dummies Questions & Answers | 1 | 09-20-2001 09:50 AM |
![]() |
|
|
LinkBack | Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
|
|
||||
|
found exploit mailserver through mailq?
First of all an appeal on all specialists to be understandfull with me, newbie. I have a RaQ 550 that I have to admin bymyself. I have executed mailq and found out that there are mails in the queu that I did not sent. Is someone exploiting my server? Here is an example of the report:
----Q-ID---- --Size-- -----Q-Time----- ------------Sender/Recipient------------ mBRIDxxxxxxx 13270 Sat Dec 27 10:13 Majordomo-Owner@xxx.xxx.net. (Deferred: Connection timed out with attcanada.net.) xxx@attcanada.net mBR7Hvxxxxxxx 12986 Fri Dec 26 23:17 Majordomo-Owner@xxx.xxx.net. (Deferred: Connection timed out with ifg.com.) xxx@ifg.com etc. I do not have smtp active, only pop. I have activated now POP Authenticated Relaying with my IP through the GUI interface. Would this be enough to prevent exploiting my server for spam? Last edited by rolandk; 12-28-2008 at 07:40 AM.. |
|
|||||
|
The first thing to try would be something like: Email Server Test - Online SMTP diagnostics tool to see if you are suffering from any of the normal exploits.
Secondly make sure you don't have any web based services ( browser forms etc. ) that could be used to submit mail, these can easily bypass authentication by sending as a local user if not properly secured. |
![]() |
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|