Mail Server Compromised?

2010-12-25 Thread ASAI
Greetings, In the logs I have been seeing many attempts made to send messages to gmail which seem like there's spam being sent from my server. In the logs I see this: Dec 24 00:05:11 triata amavis[29729]: (29729-06) Passed CLEAN, -> , Message-ID: <20101224070510.bf7acfd8...@triata.global

Re: Mail Server Compromised?

2010-12-25 Thread Ralf Hildebrandt
* ASAI : > Greetings, > > In the logs I have been seeing many attempts made to send messages to > gmail which seem like there's spam being sent from my server. In the > logs I see this: > > Dec 24 00:05:11 triata amavis[29729]: (29729-06) Passed CLEAN, > -> > , Message-ID: > <20101224070510.bf7

Re: Mail Server Compromised?

2010-12-25 Thread Noel Jones
Your web server has a compromised script. Turn off Apache until you fix the problem. -- Noel Jones "ASAI" wrote: >Greetings, > >In the logs I have been seeing many attempts made to send messages to >gmail which seem like there's spam being sent from my server. In the >logs I see this: >

Re: Smart Host Configuration

2010-12-25 Thread Roman Gelfand
Actually, the original proble reported with the previous post namely connection timeout was resolved. After checking tcpdump, I realized outgoing smtp port was closed. But, as it appears, this email was not in vain. I need to use a different smtpd server. Nevertheless, the 587 server worked wel

Re: Smart Host Configuration

2010-12-25 Thread Roman Gelfand
On Fri, Dec 24, 2010 at 4:20 PM, Stan Hoeppner wrote: > Roman Gelfand put forth on 12/24/2010 10:45 AM: >>  I neglected to mention the exchange server, source outbound server, >> is on internal edge of the dmz. > > Bah, you did mention the Exchange server and I just missed it.  The 587 > is more g