I screwed up : I left my box open for a few days and
already somebody found it and started to send spam. 

So, I installed ucspi-tcp and allowed selective relaying
as described in the excellent document by Chris Johnson.
"Selective relaying with tcpserver and qmail-smtpd"
http://www.palomine.net/qmail/selectiverelay.html

And I've tested this from the network as well as from
http://www.abuse.net/relay.html and it would appear that
relaying is not allowed. 

I just rebooted the machine and have not yet started 
tcpserver and qmail-smtp, and suddenly I find dozens
of qmail-remote processes running. (see below)

Could somebody pls tell me what is going on here ?
Have these been queued ? (I couldn't find them in 
/var/qmail/queue or any of its subdirectories) 
How can they still be getting through to my box 
if qmail-smtp is not even running yet ? (telneting
to port 25 won't even get you a connection). And how
can I get rid of them ? 

(Oh, and if anybody knows the [EMAIL PROTECTED], pls
break his kneecaps)

Thanks for any help b/c this is obviously not 
a good thing - I'm just killing qmail-remote.

chas


qmailr 10836  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 257@cra
qmailr 10853  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 274@cra
qmailr 10859  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 280@cra
qmailr 10863  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 284@cra
qmailr 10869  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 290@cra
qmailr 10875  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 296@cra
qmailr 10877  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 298@cra
qmailr 10880  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 300@cra
qmailr 10881  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 301@cra
qmailr 10882  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 302@cra
qmailr 10883  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 303@cra
qmailr 10884  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 304@cra
qmailr 10885  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 305@cra
qmailr 10886  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 306@cra
qmailr 10887  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 307@cra
qmailr 10888  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 308@cra
qmailr 10889  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 309@cra
qmailr 10890  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 311@cra
qmailr 10891  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 312@cra
qmailr 10892  0.0  0.1   788  428  p0  S     5:49AM   0:00.00 qmail-remote
crazy.ucs.com.tw [EMAIL PROTECTED] 313@cr

Reply via email to