Hi All
I have a server which seems to be getting spam relayed through it.
The story is this.
User reported loads of undeliverables being received so I had a trawl
through the logs.
So the attacker connects to our server using SMTP AUTH
Oct 5 15:17:53 www sendmail[6972]: AUTH=serve
> I'm pretty sure that this is possible, but I don't currently know enough
> about
> email to know where to start.
>
> My main desktop computer runs Centos 6 and my preferred email client is
> Sylpheed, which supports both POP and IMAP email, and my "internal
> network" has
> a static IP address, s
> Baseline is, there is or has been a user "jon" usable for SMTP AUTH as
> you have shown by the log entry:
>
> Oct 5 15:17:53 www sendmail[6972]: AUTH=server,
> relay=pppoe9.net109-120-27.se1.omkc.ru [109.120.27.9] (may be forged),
> authid=jon, mech=LOGIN, bits=0
>
> Alexander
>
Hi Alexander
3 matches
Mail list logo