[CentOS] SMTP Auth Spam Mail Attack

2013-10-05 Thread Paul Shuttleworth
Hi All I have a server which seems to be getting spam relayed through it. The story is this. User reported loads of undeliverables being received so I had a trawl through the logs. So the attacker connects to our server using SMTP AUTH Oct 5 15:17:53 www sendmail[6972]: AUTH=serve

Re: [CentOS] Email access via Android device

2013-10-05 Thread Paul Shuttleworth
> I'm pretty sure that this is possible, but I don't currently know enough > about > email to know where to start. > > My main desktop computer runs Centos 6 and my preferred email client is > Sylpheed, which supports both POP and IMAP email, and my "internal > network" has > a static IP address, s

Re: [CentOS] SMTP Auth Spam Mail Attack

2013-10-05 Thread Paul Shuttleworth
> Baseline is, there is or has been a user "jon" usable for SMTP AUTH as > you have shown by the log entry: > > Oct 5 15:17:53 www sendmail[6972]: AUTH=server, > relay=pppoe9.net109-120-27.se1.omkc.ru [109.120.27.9] (may be forged), > authid=jon, mech=LOGIN, bits=0 > > Alexander > Hi Alexander