[x]
Posted via EE Mobile

Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.
Question
[x]
Attachment Details

How do we identify if we have a hacked mailserver.

Asked by p1czech in FreeBSD, Postfix

Tags: freebsd, postfix

Here is the message we are getting from SORBS;

Database of vulnerable/hacked servers  
Address and Port: 65.49.33.150
Record Created: Mon Jul 13 07:08:01 2009 GMT
Record Updated: Mon Jul 13 07:08:01 2009 GMT
Additional Information: Spam Sending Trojan or Proxy attempted to send mail from/to from=<terri.geralds@insurancemarketinghome.com> to=<employment@paticipating.domain> proto=smtp helo=<insurancemarketinghome.com>

From this error message, how do we tell if we have a hacked server and how can we fix it?
 
Related Solutions
Keywords: How do we identify if we have a hack…
Title
1 Email failure notices from illegitimate int…
 
Loading Advertisement...
 
[+][-]08/19/09 12:26 PM, ID: 25136324Expert Comment

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]08/19/09 01:59 PM, ID: 25137278Author Comment

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]08/19/09 02:01 PM, ID: 25137299Expert Comment

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]08/20/09 02:25 AM, ID: 25140525Expert Comment

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]08/21/09 11:09 PM, ID: 25157559Expert Comment

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
 
Loading Advertisement...
20091021-EE-VQP-81 - Hierarchy / EE_QW_3_20080625