LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 08-15-2006, 10:20 AM   #1
jjrowan
Member
 
Registered: Sep 2001
Location: New Jersey
Distribution: Red Hat, SuSE, CentOS and Ubuntu
Posts: 50

Rep: Reputation: 16
Exclamation Sendmail being used to send spam through rejected mail


I posted to the sendmail news group but no one responded. I pasted that post below. It seems some Internet pharmacy spam is being sent to random user names on this server and the server is bouncing them back but the sender has crafted the email so that the bounced mail is going to the party they originally targeted. How can I stop the server from being used to bounce these messages?

I'm running Sendmail version 8.13.1, config V10/Berkeley on a CentOS Linux 4.3 server. Today I noticed there were 7000 plus messages in the outbound queue. They are the result of rejections of verifying user attempts.

Does anyone know if this is a new virus/worm or Trojan?


Aug 14 08:02:51 softtail sendmail[4553]: k7EC2esr004553: from=<>, size=6877, class=0, nrcpts=1, msgid=<200608141202.k7EC2esr004553@softtail..com>, proto=SMTP, daemon=MTA, relay=extsmtp3.localnet.com [207.251.201.55]
Aug 14 08:02:51 softtail lmtpunix[4519]: accepted connection
Aug 14 08:02:51 softtail lmtpunix[4519]: lmtp connection preauth'd as postman
Aug 14 08:02:51 softtail lmtpunix[4519]: verify_user(user.p.holland) failed: Mailbox does not exist
Aug 14 08:02:51 softtail sendmail[4559]: k7EC2esr004553: to=<p.Holland@deleted.com>, delay=00:00:00, xdelay=00:00:00, mailer=cyrusv2, pri=126877, relay=localhost, dsn=5.1.1, stat=User unknown
Aug 14 08:02:51 softtail sendmail[4559]: k7EC2esr004553: k7EC2psr004559: postmaster notify: User unknown


Aug 14 08:02:57 softtail sendmail[4533]: k7EC2Y7A004533: from=<gormlaithead@horacio.com>, size=2037, class=0, nrcpts=1, msgid=<000001c6bf99$7fd5d720$d61ca8c0@hgr94>, proto=SMTP, daemon=MTA, relay=AStDenis-105-1-6-150.w81-248.abo.wanadoo.fr [81.248.193.150]
Aug 14 08:02:57 softtail lmtpunix[4515]: accepted connection
Aug 14 08:02:57 softtail lmtpunix[4515]: lmtp connection preauth'd as postman
Aug 14 08:02:57 softtail lmtpunix[4519]: accepted connection
Aug 14 08:02:57 softtail lmtpunix[4519]: lmtp connection preauth'd as postman
Aug 14 08:02:57 softtail master[4567]: about to exec /usr/lib/cyrus-imapd/lmtpd
Aug 14 08:02:57 softtail lmtpunix[4519]: verify_user(user.vxp-hatcher) failed: Mailbox does not exist
Aug 14 08:02:57 softtail sendmail[4566]: k7EC2Y7A004533: to=<vxp-hatcher@deleted.com>, delay=00:00:01, xdelay=00:00:00, mailer=cyrusv2, pri=122037, relay=localhost, dsn=5.1.1, stat=User unknown
Aug 14 08:02:57 softtail lmtpunix[4567]: executed
Aug 14 08:02:57 softtail sendmail[4566]: k7EC2Y7A004533: k7EC2v7A004566: DSN: User unknown
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Mail Server Issues; Can't Send E-mail (using sendmail) Vegetarian Smoker Linux - Software 1 06-18-2006 02:16 PM
sendmail getting e-mail through others spam filters grizzly Linux - Software 1 08-20-2005 05:18 PM
How the sendmail stop the Spam mail? goonfui_wong Linux - Networking 6 06-29-2005 09:04 AM
spammer using my mail server send spam email pd5c18 Linux - Networking 2 07-14-2004 01:32 AM
Anti Spam Software for a Send Mail Relay thecrab Linux - Software 1 08-06-2003 09:19 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 02:17 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration