LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 06-07-2012, 12:11 AM   #1
sanjay87
Member
 
Registered: Oct 2011
Posts: 164

Rep: Reputation: Disabled
Fail2ban Generating spam message


Hi all
i had installed iredmail mail server in ubuntu 10.04 lucid server .But yesterday my ipaddress was blocked by internet service provider regarding sending out spammessage to outside world.Fail2ban is the package comes out with default installation of iredmail server

---
Reported-From: abuse-team@blocklist.de
Category: info
Report-Type: info
Service: badbot
Version: 0.1
Quote:
User-Agent: Fail2BanFeedBackScript blocklist.de V0.1
Date: Mon, 04 Jun 2012 14:34:46 +0200
Source-Type: ip-address
Source: ip-address
Port: 80
Report-ID: @blocklist.de
Schema-URL: http://www.blocklist.de/downloads/schema/
Attachment: text/plain

My ipaddress was blocked due to my system was generating the below spam message

I Had removed fail2ban package from my server .Can anyone advise me how can proceed furthur to block such spam message generating without my knowledge.How can fail2ban generate such spam message


wpTextbox1: What's the interest rate on this account? <a href=" hxxp://www.last.fm/user/rudobesia ">bbs porn pass</a> lol the guys looking at her like 'OMFG!!!' when shes riding him
<a href=" hxxp://www.last.fm/user/erityqisajo ">cp bbs cgi galleries</a> wow that was actually pretty damn hot lol
<a href=" hxxp://www.last.fm/user/yrubyfofapat ">zeps gallery lo bbs</a> If you find it let me know, xxxandra
<a href=" hxxp://www.last.fm/user/atugykua ">elwebbs samples</a> Ladynubiia India is on the continent of Asia (FYI go touch up on your geo before you start saying shit)
<a href=" hxxp://www.last.fm/user/oujusoqaropa ">bbs forum boy</a> hmmmm the end bit is tasty xxx
<a href=" hxxp://www.last.fm/user/hanehigygy ">bbs elweb wombat</a> That fucking crazy... This video is wrong
<a href=" hxxp://www.last.fm/user/tonyynurihaj ">super bbs in porn</a> tutto li'?
<a href=" hxxp://www.last.fm/user/icucoeobo ">Ptsc bbs pictures</a> where are my keys, i need to drive around
<a href=" hxxp://www.last.fm/user/iolacuhifi ">bbs chill</a> she is a hot girl
<a href=" hxxp://www.last.fm/user/siuhebodyse ">nude teenager bbs</a> damn..this is so fucking hot..i may have to find someone to fuck.. now

wpSummary: What's the interest rate on this account? <a href=" hxxp://www.last.fm/user/rudobesia ">bbs porn pass</a> lol the guys looking at her like 'OMFG!!!' when shes riding him
<a href=" hxxp://www.last.fm

Last edited by sanjay87; 06-07-2012 at 12:13 AM.
 
Old 06-07-2012, 01:21 AM   #2
descendant_command
Member
 
Registered: Mar 2012
Posts: 754

Rep: Reputation: 158Reputation: 158
I really don't think it is your fail2ban that is the problem, it only sends reports of bans to the address you have configured in the config.

More likely is that THEY are using fail2ban with some custom scripting to ID spam arriving in their honeypot addresses and to notify the admin of the bad servers (you).

You need to check your mail server logs and see what is going on.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
postfix/qmgr message in logs seems to indicate spam sent haymaker2000 Linux - Server 4 08-25-2010 03:53 PM
printing problem generating message (unsupported personilty :PCL) bharatlalgupta Red Hat 12 02-14-2010 02:53 PM
spam filter that puts spam into spam folder? paul_mat Linux - Software 3 03-31-2009 04:18 AM
Reporting spam by forwarded message broadcast Linux - General 2 03-21-2007 08:51 AM
Parsing a message directly to spam assassin cpanelskindepot Linux - Software 2 02-01-2005 08:59 PM


All times are GMT -5. The time now is 07:20 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration