Solved

qmail Spam Issues

Posted on 2012-03-14
3
359 Views
Last Modified: 2012-06-25
Dear Experts,

We have installed qmail in our new server and started running our website in the server.
It was a dedicated server and did not have much experience in the mail server configuration. So we installed it in the default form.

Now my server people complain that we are sending spam with the server. We have also confirmed the somehow our mail server is used to send some spam emails.

Can anybody send the email using our qmail mail server FROM A DIFFERENT server?

Or will it be somebody hacked into our server and wrote a php program to send the emails?
I doubt the first one anyway?

If so, how can I prevent others to not use the mail server but just allow my own php files to send email with the mail server?
Can anybody please advice?

Thanks,
Jacob
0
Comment
Question by:jacobbbc
  • 2
3 Comments
 
LVL 34

Assisted Solution

by:Duncan Roe
Duncan Roe earned 334 total points
ID: 37723894
I run qmail but only now as a vestigial service for pushing out aliased mail.
I suspect someone is using your server as an email relay. I've perused the man pages, but I don't see how they would do that. Possibly your locals are too open - worth checking.
0
 
LVL 5

Assisted Solution

by:1ly4me
1ly4me earned 166 total points
ID: 37724115
Use nmap to check port number 25 (This is for SMTP - sending mails), If the port is open close it, and open relay only to localhost.
If your SMTP port open to all, any one can use it as a SMTP gateway and can send any kind of emails.
0
 
LVL 34

Accepted Solution

by:
Duncan Roe earned 334 total points
ID: 37724461
lsof -i (run as root) should show port smtp listening on all interfaces for tcpserver run by qmaild. I don't think that means it can or will relay.
Make sure that RELAYCLIENT is not set in the environment of qmail-smtpd. You can do this from the proc file system.
Also if you think you are being used as a relay, check /var/log/qmail/current
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
OpenWrt 1 28
Flux question 2 84
Botnet C&C DNS response Malicious Traffic 28 153
How to get IPA working with samba on RHEL 6? 1 75
In this article you will learn how to create a free basic website on Bitbucket, a git service provider. Polymer creates dynamic HTML components, which allow more flexibility than static HTML. This tutorial uses Ubuntu Linux but can also be done on W…
This story has been written with permission from the scammed victim, a valued client of mine – identity protected by request.
The purpose of this video is to demonstrate how to set up the WordPress backend so that each page automatically generates a Mailchimp signup form in the sidebar. This will be demonstrated using a Windows 8 PC. Tools Used are Photoshop, Awesome…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now