big problem with spam

[p.engels]

hello, i have a big problem since 3-4 days...

no log will be written at /var/log/messages, /var/log/syslog and other like mail etc.

and a ps aux | grep qmail gives me a lot items like:

qmailr 18551 0.0 0.0 2944 852 pts/0 S 10:07 0:00 qmail-remote yahoo.fr [email protected] [email protected]

i have tried to close the relay but i don´t find the right option...

is there anybody with a answer for me?

 

[atomicturtle]

PSA logs mail events to /usr/local/psa/var/log/maillog

It could also be that mail is being relayed through a vulnerable web script on your site.

 

[hipernet]

is there any way to view smtp auth process in the log files?

 

[atomicturtle]

yes, smtp_auth logs to /var/log/messages

 

[hipernet]

Not in Fedora I only see proftpd sessions, Have I to put anything in special on /etc/syslog.conf?

 

[atomicturtle]

Something must be wrong with your box then, since I can see it logging on FC2 (7.5.4), FC3 (7.5.4), FC4 (8.0.1), and CentOS 4 (8.0.1) to /var/log/messages