RE: [IMail Forum] Stopping a hijacking by bulk mailers

[Fitscape.com Internet Relations]

If you do not get down to that server soon, the 'shotgunned' mail will
eventually run the spool so that the machine will literally overload and
your drive will become destroyed (along with all the data on it).  I have
seen it happen.  Get down there as soon as you (or call someone there) can
and turn the thing off!

> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Tor Rognmo
> Sent: Sunday, July 02, 2000 3:23 PM
> To: [EMAIL PROTECTED]
> Subject: [IMail Forum] Stopping a hijacking by bulk mailers
>
>
> This weekend one of the domains at our imail server has been hijacked by
> spammers sending bulk mail - the smtp setting was allow anyone to
> send so I
> guess it was just a problem waiting to happen. I have no idea how
> much mail
> is being sent but since yesterday evening it's been taking about half an
> hour to pick up a single message from the server, and it took 1
> hour to try
> to log on with PC Anywhere before it timed out and gave up. So obviously
> there is a lot of mail traffic going through.
> Since this is a long weekend in Canada we don't have access to
> tech support
> and to get someone to reboot our server at its parked location.
> Normally we
> administer the server using PC Anywhere, but due to the machine
> being low on
> resources because of the massive bog down of the smtp services PC Anywhere
> is not responding.
> I am however able to access the server through ftp and get file access to
> the imail directory and the winnt directory.
> Is there a particular file I could rename/disable when connected
> through ftp
> in order to shut down the smtp service so that I can take control of the
> server again?
> I have tried to delete pending outgoing messages from the imail/spool
> directory but it says I don't have access to do so - even though
> I am logged
> on as administrator through ftpvoyager.
> Thanks,
> Tor
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.