Re: [SM-USERS] server used as spammer

2010-03-11 Thread Paul Lesniewski
KAM, please do not top post. Please review the mailing list posting guidelines. >> I am using squirrelmail 1.4.17 >> I have a user whose password was compromised in some way and the >> squirrelmail >> server started sending out spam email every second or so. (using >> sendmail). >> I also got in

Re: [SM-USERS] server used as spammer

2010-03-11 Thread Kevin A. McGrail
Jerry, Some quick hints: Security Issue: A) stay more up to date on squirrelmail packages. That package has known exploits. B) use randomly generated passwords. For example, this site came up from a quick Google search: http://www.thebitmill.com/tools/password.html Auth Warning: C) To al

[SM-USERS] server used as spammer

2010-03-11 Thread Jerry Mersel
I am using squirrelmail 1.4.17 I have a user whose password was compromised in some way and the squirrelmail server started sending out spam  email every second or so. (using sendmail). I also got in the logs this warning -  Authentication-Warning:  machinename: apache set sender to some name us