On 21 Aug 2014, at 14:54, Charles Richard <charle...@thelearningbar.com> wrote:
> I have inherited a postfix 2.6 mail server which also uses Dovecot 1.1.14 . > > This is basically a legacy mail server that can't be shutoff because it is > now used only to forward the emails sent to a few mailboxes to the new email > addresses now being used. > > This email server has been compromised and from what I can tell. it is > sending spam from localhost. I don't know much about postfix. > > Any suggestions on how to fix this? We don't need the local mailboxes to be > able to send messages anymore. We only want messages sent to valid mailboxes > to be fowarded as per the forward rules we have setup. Find what is causing it, and turn off all possible ways of submission; web sites with forms, SASL authentication, and so on. You won't be needing Dovecot either, if there are no local accounts remaining. Mvg, Joni
