| |
| |
| |
|
Comments:
<0> i have several server. many of them is used of hosting purposes. there are several client in one server. recently i found some client are using a webscript to launch spam against several isp. i want to know are there any effective wayout to prevent this sort of exploitation.
<0> any suggestion will be greatly appreciated.
<1> Shut them down?
<1> I say this because I'm sure it'll be against your Terms of Use
<1> And even if you do put preventative measures in place, they'll get around them
<1> They don't sound like users you want around really
<0> yes i agree with you
<0> also i want to know who is the main cluprit behind this attack. Just to track them. I found bit diffcult because they are just invoking the mail function from php script giving fake from address using some of the hostname hosted in the server. so that the mail goes without any problem.
<0> they launch this attack every alternate days
<0> so its not so easy to get the right process
<0> any suggestion how can i track this
<1> Whoever put the script up is likely to be the culprit
<0> but just to track which script is actually doing. just OT so i will get some help from other channel. thanks
<1> ok
<1> I understand that I need to recompile with m4 after making edits to mc files but I don't know which one was used to create my current sendmail.cf
<1> Does anyone know which mc file is the default configuration file for FreeBSD?
<2> how about /etc/mail/sendmail.mc ?
<3> How can I get sendmail to record the connecting IP address for each message delivered?
<1> That's the one Wulf4 - thanks
<1> Do I need to recompile it if I alter mailertable/virtualusertable?
<2> Nuxi: it already does, have a look at your logs
<2> MidBSD: no
<1> Thanks Wulf4
<3> I think it records incorrectly. When I block a particular address 209.51.220.26 with iptables, I still keep getting spam from that address.
<3> tcpdump port 25 >> 25log shows that I never get a connection from that address.
<2> Nuxi: can u forward one of these mails to trash@no-one.kicks-***.net ?
<3> I ***umed it must be getting the ip address from dns.
<3> I've been redirecting them to a mail account symlinked to /dev/null. Let me see if I can keep one.
<3> I get most of it at night.
<1> Where do I find out which .cf file my sendmail is using?
<4> /usr/lib/sendmail -bt -d0.13 < /dev/null
<5> or /usr/sbin/ on other systems
<1> sbin for me
<1> Thanks guys
<5> granted, you might also have custom daemons running with the -C option...
<1> Mine is just a bog standard FreeBSD default setup
<1> I couldn't tell which of the two .cf files it was using in the mail directory
<1> Is there a config file to tell Sendmail which config file to use or is it always sendmail.cf?
<5> sendmail.cf, unless you say otherwise with -C
<1> Great
<1> I'm just about to edit my config file for the first time
<4> MidBSD: it is really easy to handle that on FreeBSD
<1> Something I've not been looking forward to
<5> http://sial.org/howto/sendmail/#s2 may help
<4> just read the Makefile carefully
<1> Thanks Zerberus
<1> That's a great chart thrig
<1> ;)
<1> In FreeBSD, does Sendmail have a sendmailctl restart equivalent?
<1> Or do I just send it a -HUP?
<4> it has a start script
<4> please read the FreeBSD handbook carefully
<4> if sendmail from the base system is used, then /etc/rc.d/sendmail
<4> if from ports then /usr/local/etc/rc.d/sendmail
<1> I'm not sure what that means but I'm reading the docs now
<1> I understand the difference between using ports and packages
<1> But not about how scripts work with regard to how they relate to the files in the directories
<1> I'd forgotten the docs in the handbook
<1> I've been scouring the internet for information for so long
<4> the freebsd handbook is a good piece of documentation
<1> Yeah
<1> It's good so long as you don't go off the beaten track
Return to
#sendmail
or
Go to some related
logs:
apev2 TAG ubuntu
run ubuntu on ipaq
#debian
'dpkg --configure -a' to correct the problem.
#suse
pyhon list unique function
#gimp
#bash
chkonfig debian
disable anvil postfix suse
|
|