Well, only four people use my mailserver and three of them have patched systems and the fourth one runs a Mac. So, I really have no clue where these messages come from. Also, I don't receive bounce messages - I only see smtp activity in my current smtp log. This is really highly suspect...
----- Original Message ----- From: "Harald Schneider" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, August 22, 2003 11:03 AM Subject: [xmail] AW: Re: HEELP - mailserver has been hacked!! > > Don't panic. If these mails have one of these subjects > Your details=20 > Thank you!=20 > Re: Thank you!=20 > Re: Details=20 > Re: Re: My details=20 > Re: Approved=20 > Re: Your application=20 > Re: Wicked screensaver=20 > Re: That movie=20 > > then they are the generated by the SOBIG worm. They bounce back to your > server > and fill up the queue. For details see > http://xmailforum.homelinux.net/index.php?showtopic=3D956 > > --Harald > > > -----Urspr=FCngliche Nachricht----- > > Von: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Im Auftrag von William > > Gesendet: Freitag, 22. August 2003 18:44 > > An: [EMAIL PROTECTED] > > Betreff: [xmail] Re: HEELP - mailserver has been hacked!! > >=20 > >=20 > >=20 > > > > I got a few 'bounced' messages this morning quoting=20 > > emails that I never > > sent out. Now, I'm tailing my smtp log and it appears=20 > > somebody is using > > several machines to connect to my server and send out messages: > >=20 > > Which would mean you have an open relay, not really a hacked=20 > > machine. I > > would change my management port from the default though,=20 > > which is done via > > the registry. > >=20 > > - > > To unsubscribe from this list: send the line "unsubscribe xmail" in > > the body of a message to [EMAIL PROTECTED] > > For general help: send the line "help" in the body of a message to > > [EMAIL PROTECTED] > >=20 > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
