Possible implication of a Sendmail on OpenBSD 3.8 in a spam attack

2006-01-25 Thread Gabriel George POPA
Sorry to bother you, but I would like to show you some aspects about how a Sendmail running on an OpenBSD 3.8 system can be involved in a spam attack. I'm not quite sure that OpenBSD 3.8 or Sendmail are exploitable, but I would like some help to clarify this problem. More precisely,

Re: Possible implication of a Sendmail on OpenBSD 3.8 in a spam attack

2006-01-25 Thread James Strandboge
On Wed, 2006-01-25 at 14:09 +0200, Gabriel George POPA wrote: small server running OpenBSD 3.8, MySQL+PHP+Apache for the website; I'd look here. Check out: http://secunia.com/advisories/17763/ You didn't post anything from maillog or headers of a rejected message, so this is only a guess.

Re: Possible implication of a Sendmail on OpenBSD 3.8 in a spam attack

2006-01-25 Thread Alexander Bochmann
...on Wed, Jan 25, 2006 at 02:09:58PM +0200, Gabriel George POPA wrote: Yahoo! do not accept some mails from me). I've noticed that the mailstats command reports 13 (!!!) messages sent (!) outside. My computer is a small server running OpenBSD 3.8, MySQL+PHP+Apache for the website;

Re: Possible implication of a Sendmail on OpenBSD 3.8 in a spam attack

2006-01-25 Thread Stuart Henderson
On 2006/01/25 14:09, Gabriel George POPA wrote: More precisely, one day I've noticed that /var/spool/mqueue was full with 3 messages (in fact return messages, showing that some servers including Yahoo! do not accept some mails from me). Some people send bulk email by putting the

Re: Possible implication of a Sendmail on OpenBSD 3.8 in a spam attack

2006-01-25 Thread Dylan Smith
On Wednesday 25 January 2006 12:09, you wrote: ... I've noticed that the mailstats command reports 13 (!!!) messages sent (!) outside. My computer is a small server running OpenBSD 3.8, MySQL+PHP+Apache for the website; There's one potential smoking gun right there. PHP. You know PGP