RE: Hacking activity

2009-02-19 Thread Tait Grove
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Noel Jones > Sent: Thursday, February 19, 2009 10:34 AM > To: Tait Grove; 'postfix users list' > Subject: Re: Hacking activity > > Tait

Re: Hacking activity

2009-02-19 Thread Noel Jones
Tait Grove wrote: I did open a few of the messages. The user has taken over the dovecot account. So all the emails are coming from dove...@local.servername.net through postfix. I thought for sure an account had been compromised. Dovecot is a local, unix user, with nologin and the account is locke

RE: Hacking activity

2009-02-19 Thread Tait Grove
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Noel Jones > Sent: Thursday, February 19, 2009 9:14 AM > To: Tait Grove; 'Postfix users' > Subject: Re: Hacking activity > > Tait Grove w

Re: Hacking activity

2009-02-19 Thread Noel Jones
Tait Grove wrote: Somehow, out of the blue, my postfix setup is allowing relaying. I pass all the relay tests, but a hacker has figured out how to send email through my server without authenticating. I have checked my server for being an open relay and all the tests are passing. The only error

Hacking activity

2009-02-19 Thread Tait Grove
Somehow, out of the blue, my postfix setup is allowing relaying. I pass all the relay tests, but a hacker has figured out how to send email through my server without authenticating. I have checked my server for being an open relay and all the tests are passing. The only error log entry that is show