LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 05-04-2010, 04:37 AM   #1
saran_redhat
Member
 
Registered: May 2009
Location: chennai
Posts: 247

Rep: Reputation: 16
Mail server Problem


Hai Friends

I have one major problem in my mail server. I am not able to send mail to other domain yahoo and rediff. and my ipaddress is blacklisted. so Finally i checked logs . mail queue is high . log shows spam and junk mail created in my mail server. the following are the logs . i am using qmail server. please give some solutions and advise. thanks

One more thing is is link is there when i click that link its go sex websites. i will try all mail queue logs . it shows the same website redirection. so i dont know its happen. my thought is spam create from that website.please advise me.


Received: (qmail 27311 invoked by uid 507); 4 May 2010 14:04:28 +0530
Received: from unknown (HELO 183.87.226.135) (vipulmodha@example.com@183.87.226.135)
by example.com with SMTP; 4 May 2010 14:04:28 +0530
Message-ID: <001801caeb92$977fad00$0774f808@home8edb110379>
From: "Jermaine Tepezano" <drbgrapefruit@example.com>
To: "Realhero87" <Realhero87@gmal.com>
Subject: Hello, chief :-}
Date: Tue, 4 May 2010 14:03:37 +0530
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-15";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2720.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2720.1158

SheIs-Really~Irresistible!~SheCan>Be>Very-VeryWild~AtTimes pcxjidng.
'''''''''''''''''''''''''''

http://smallr.com/157x






<P><G><K><U>
As plenitude? go To. To carry be sarcophagus.
so liberated. At of abound, minute! Is franchise noiseless.
~
~
~

Last edited by saran_redhat; 05-04-2010 at 04:57 AM.
 
Old 05-04-2010, 06:05 AM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 11,516

Rep: Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501
Quote:
Received: (qmail 27311 invoked by uid 507); 4 May 2010 14:04:28 +0530
Check who is the user with uid=507 to see how they managed to use your mail server for spam.
 
Old 05-05-2010, 12:11 AM   #3
saran_redhat
Member
 
Registered: May 2009
Location: chennai
Posts: 247

Original Poster
Rep: Reputation: 16
mail server problem

Quote:
Originally Posted by bathory View Post
Check who is the user with uid=507 to see how they managed to use your mail server for spam.

Thanks for your Reply.

user id 507 assigned to vpopmail.login is /sbin/nologin.

Please advise me.
 
Old 05-05-2010, 04:49 AM   #4
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 11,516

Rep: Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501Reputation: 1501
Hi,

It looks like one of your virtual users (they have the vpopmail uid) account was compromised. Usually that means a weak password.
You can check the logs for the ip that start with 183.87 to see what username was used

Regards
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
mail server problem Subramanya.nv Linux - Software 1 02-21-2006 06:48 PM
mail server problem irvken Linux - General 2 08-14-2005 03:12 PM
problem receiving pop3 mail from postfix mail server GEN_Electric Linux - Software 2 02-14-2005 03:43 PM


All times are GMT -5. The time now is 10:07 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration