Hi
I set up my first mail server today.

I'm worried about the BOGUS file in my /var/mail folder - can someone tell me what it is? I tried to google it and found lots about removing spyware etc. but I'd like to know how this got created and how to prevent it doing any damage.

Part of setting up the server meant editing the iptables to allow SMTP.

Mail users have been set up with no login such as
adduser -s /sbin/nologin registration;

Can you tell me what some good security checks you recommend are to ensure my mail server is not going to be misused. Are there any sites which can be used to test the security on a mail server?

Many thanks

Kevin

There are actually a lot of tools out there that can check for holes like languard and eyescanner. The biggest thing I would check is that to make sure that your server wont forward without authentication. So spam bots dont abuse your server

jb_get,
How about some links to your suggestions? -- Neither has a Wikipedia article, languard generates "about 9,310" Google Linux hits, while eyescanner only shows this thread.