?
Solved

qmail Spam Issues

Posted on 2012-03-14
3
Medium Priority
?
369 Views
Last Modified: 2012-06-25
Dear Experts,

We have installed qmail in our new server and started running our website in the server.
It was a dedicated server and did not have much experience in the mail server configuration. So we installed it in the default form.

Now my server people complain that we are sending spam with the server. We have also confirmed the somehow our mail server is used to send some spam emails.

Can anybody send the email using our qmail mail server FROM A DIFFERENT server?

Or will it be somebody hacked into our server and wrote a php program to send the emails?
I doubt the first one anyway?

If so, how can I prevent others to not use the mail server but just allow my own php files to send email with the mail server?
Can anybody please advice?

Thanks,
Jacob
0
Comment
Question by:jacobbbc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 35

Assisted Solution

by:Duncan Roe
Duncan Roe earned 1002 total points
ID: 37723894
I run qmail but only now as a vestigial service for pushing out aliased mail.
I suspect someone is using your server as an email relay. I've perused the man pages, but I don't see how they would do that. Possibly your locals are too open - worth checking.
0
 
LVL 5

Assisted Solution

by:1ly4me
1ly4me earned 498 total points
ID: 37724115
Use nmap to check port number 25 (This is for SMTP - sending mails), If the port is open close it, and open relay only to localhost.
If your SMTP port open to all, any one can use it as a SMTP gateway and can send any kind of emails.
0
 
LVL 35

Accepted Solution

by:
Duncan Roe earned 1002 total points
ID: 37724461
lsof -i (run as root) should show port smtp listening on all interfaces for tcpserver run by qmaild. I don't think that means it can or will relay.
Make sure that RELAYCLIENT is not set in the environment of qmail-smtpd. You can do this from the proc file system.
Also if you think you are being used as a relay, check /var/log/qmail/current
0

Featured Post

Are You Using the Best Web Development Editor?

The worlds of web hosting and web development are constantly evolving. Every year we see design trends change, coding standards adapt and new frameworks/CMS created. With such a quick pace of change it’s easy to get lost trying to keep up.

See if your editor made the list.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

One of the biggest threats facing all high-value targets are APT's.  These threats include sophisticated tactics that "often starts with mapping human organization and collecting intelligence on employees, who are nowadays a weaker link than network…
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
The purpose of this video is to demonstrate how to set up the WordPress backend so that each page automatically generates a Mailchimp signup form in the sidebar. This will be demonstrated using a Windows 8 PC. Tools Used are Photoshop, Awesome…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question