Re: message logging
Stefano Pascucci <[email protected]> Tue, 21 May 2013 18:05:25 +0200
| Newsgroups | gmane.mail.xmail.general |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
--===============1434282037==
Content-Type: multipart/alternative;
boundary="------------050002010401010907050506"
This is a multi-part message in MIME format.
--------------050002010401010907050506
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Hi Spyros
I experienced a similar situation some months ago: one of my server
email owner was sending tons of spam
After figthing with many log files, I have discovered that the hacker
had been able to hack the mailbox pwd, and he was sending the email
using smtp autetication method.
You can find the evidence of that inside the smtp log, looking for all
the authenticated users that are sending email, and find the ones that
are spam
Il 21/05/2013 16:26, Spyros Tsiolis ha scritto:
> Hello all,
>
> I have a situation with an installation where someone has managed
> to get hold of an e-mail address (the boss' actually) and is sending
> spam to the outside world.
>
> To an extend, I've managed to isolate the problem and it seems
> it's the mail server itself.
> I still don't know if it's XMail or an anti-spam solution I've adopted
> since about 2004.
>
> I would like to monitor the mail that goes out to the world.
> Can I do this with XMail ? Do I check the logs ? Which logs ?
> I've never done this before, so I would be greatful to any help.
>
> thank you,
>
> spyros
>
--------------050002010401010907050506
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Hi Spyros<br>
I experienced a similar situation some months ago: one of my
server email owner was sending tons of spam<br>
After figthing with many log files, I have discovered that the
hacker had been able to hack the mailbox pwd, and he was sending
the email using smtp autetication method.<br>
You can find the evidence of that inside the smtp log, looking for
all the authenticated users that are sending email, and find the
ones that are spam<br>
<br>
Il 21/05/2013 16:26, Spyros Tsiolis ha scritto:<br>
</div>
<blockquote
cite="mid:[email protected]"
type="cite">
<div style="color:#000; background-color:#fff; font-family:times
new roman, new york, times, serif;font-size:12pt">Hello all,<br>
<br>
I have a situation with an installation where someone has
managed<br>
to get hold of an e-mail address (the boss' actually) and is
sending<br>
spam to the outside world.<br>
<br>
To an extend, I've managed to isolate the problem and it seems<br>
it's the mail server itself.<br>
I still don't know if it's XMail or an anti-spam solution I've
adopted<br>
since about 2004.<br>
<br>
I would like to monitor the mail that goes out to the world.<br>
Can I do this with XMail ? Do I check the logs ? Which logs ?<br>
I've never done this before, so I would be greatful to any help.<br>
<br>
thank you,<br>
<br>
spyros<br>
<br>
</div>
</blockquote>
</body>
</html>
--------------050002010401010907050506--
--===============1434282037==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
xmail mailing list
[email protected]
http://xmailserver.org/mailman/listinfo/xmail
--===============1434282037==--