> When I got back from lunch today, I heard our server's hard drive spinning
> like crazy. We don't get a lot of traffic, so this concerned me. A quick
> look at ps aux and my debug.log showed that I was being used as a SPAM
> host. I'm pretty mad right now!
> What can I do to prevent this from happening again? Anything? I thought
> I was snug and cozy behind our firewall...
Turn off relaying in sendmail. you didn't mention what version you were
running. If it's 8.9.0, you've got several more features to take advantage
of than 8.8.x. If you're running anything older than 8.8.5, upgrade.
For 8.9.0, read the docs. For 8.8.x, check out the anti-spam rules and
links at www.sendmail.org, and check the dejanews archives of comp.mail.
sendmail.
How you disable relaying is dependent upon how you've currently set up your
mail system. Personally, I use several local check_* rules, denying relaying
based on IP (we're both firewalled, using header rewrites, and masquerading),
using the RBL, and also a hand-maintained blacklist of domain names, all under
8.8.5.
--Mark
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
To unsubscribe: mail [EMAIL PROTECTED] with
"unsubscribe" as the Subject.
