>
> Dear Qmail community,
>
> We need your help to track down possible security problem with qmail
> system. It maybe an email virus. But, I am not sure.
>
> The problem: our qmail server was sending out emails to people. the email
> was not orginated from our servers within our network.
> the mail was a spam email with the title - We owe you ... and
> the content of the email seems to be related to the health issue.
>
> I got an email from John B last Friday saying that we are sending out spam
> emails. So, we looked into our system and our file system which holds the
> mail log was full. so, i looked at the mail server, it was sending out emails to
> the whole list of people.
> i stopped the qmail servers and it still has more emails to send out.
>
> Help Request: what should i look at to track down the problem?
> I saved the maillog and /var/qmail/queue directory to track
> down the problem.
> I have some guess. I think I narrowed it to
> someone named [EMAIL PROTECTED] but, i am not 100% sure.
>
> how can i clean up the queue directories since there are more
> messages waiting to send out? should i just remove the files from
> todo directory?
>
> is this part of relay problem? if that is the case, what should
> i do to secure our mail server?
>
> we have qmail-1.3, fastforward, checkpasswd installed. we also
> used the pop3 server.
>
> once, i clean up the qmail, can i restarted the qmail server?
>
> how can we prevent this happening again?
>
> has anyone experienced the similar problem?
>
> we have reported the issue to [EMAIL PROTECTED], since our mail server was
> hacked. is there any other authority we should report to?
>
> Your help will be greatly appreciated.
>
> Sue Ryu
> www.RedOlive.com
>
>
> __________________________________________________
> Do You Yahoo!?
> Make international calls for as low as $.04/minute with Yahoo! Messenger
> http://phonecard.yahoo.com/
>
__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/
