[plug] Postfix Problems again (Spam Originating frommy mailserver)

[Shannon Carver]

Yep, done.  OpenWebmail client is disabled completely for the moment, at
least until I find out whats going on.  I've been looking at upgrading
these boxes for a while actually, ageing woody installation.  A new
sarge installation would probably help everything I think.  It's just a
matter of getting down to the site and replacing the box (The site is
two hours away).

Shannon

-----Original Message-----
From: plug-bounces at plug.org.au [mailto:plug-bounces at plug.org.au] On
Behalf Of Ben Jensz
Sent: Friday, 2 December 2005 9:03 AM
To: plug at plug.org.au
Subject: Re: [plug] Postfix Problems again (Spam Originating frommy
mailserver)

If you've found the cause of the problem, I'd be removing that feature 
until you upgrade it to a non-vulnerable version or otherwise securing 
it.  It'll get exploited again (probably late at night when you're 
asleep), and all it's going to end up doing is getting your IP address 
blacklisted by spam detection lists, irrespective of whether you're an 
open relay or not.


/ Ben


Shannon Carver wrote:

>Tim, 
>
>I sat up last night (midnight seems so late nowadays), just to see if
>anything changed as the time ticked over, and all seems well.  I've had
>a quick look at that vulnerability and it seems on the money, I'm not
>quire sure how it applies to becoming a spam bot.
>
>I'll watch it over the next few days, and keep everyone updated (If
>we're interested), and make sure I monitor rogue processes.
>
>Thanks all
>
>Shannon
>
>  
>

_______________________________________________
PLUG discussion list: plug at plug.org.au
http://www.plug.org.au/mailman/listinfo/plug
Committee e-mail: committee at plug.linux.org.au