qmail acting funny maybe box owned

zuessh · 09-22-2003, 08:50 PM

I have recently noticed that my qmail is not sending messages. I am receiving messages with no problem. I was checking /var/log/qmail/current and notcied a large number of mail that was undeliverable to a domain i do not know ( i use rcpthost file to restrict). I want to make sure spammers are not trying to get the box. Is there anyway to check to make sure it has not been compromised? Any suggestion? Thanks

win32sux · 09-22-2003, 09:49 PM

http://www.chkrootkit.org/

php · 09-22-2003, 09:49 PM

well, obviously receiving messages is the easy part. I would setup an intrusion detection system such as Snort.org

Log the ip's that access the computer and see what they are actually doing.