Re: Qmailt and spam

[Michael Grier]

> > The spammer seems to somehow be using the user qmailt as the
originator.
> > A copy follows. uid 12355 is the user qmailt.
>
> There is no such user in a normal qmail install.
>
> Are you sure they didn't get into your system another way?  A broken
formmail
> CGI, or something else?

I've now found that this user was most likely created yesterday when
this problem started, so now I probably have to figure out how I was
hacked. I've deleted the user.