1. Please take a little time for this simple survey! Thank you for participating!
    Dismiss Notice
  2. Dear Pleskians, please read this carefully! New attachments and other rules Thank you!
    Dismiss Notice
  3. Dear Pleskians, I really hope that you will share your opinion in this Special topic for chatter about Plesk in the Clouds. Thank you!
    Dismiss Notice

find IP from uid in qmail? URGENT

Discussion in 'Plesk for Linux - 8.x and Older' started by tolis, Feb 13, 2006.

  1. tolis

    tolis Guest

    0
     
    Hi
    i have found that someone is using our server to send spam.All messages have a uid 48 anf i found this uid in stpm-pendings.log
    Can i find his IP somehow?
    Thanks
     
  2. bandurao

    bandurao Guest

    0
     
    Please do not post alternative forums as a solution to a question on the SWsoft website...
     
  3. phoenixisp

    phoenixisp Silver Pleskian

    27
    57%
    Joined:
    Feb 2, 2002
    Messages:
    840
    Likes Received:
    0
    And he's at it again, at least you are a persistant spammer bandurao.

    tolis - have you checked your mail log? Look at /usr/local/psa/var/log/maillog
     
  4. tolis

    tolis Guest

    0
     
    found it!

    OK thanks for your replies but the problem was php scripts
    The uid 48 is apache and in particular 2 domains had an overwelming visit in formmail.php which is quite risky and through it they managed to send spam through bcc recipients.
    Now that i removed them queue is clear and hopefully i will get delisted in a few hours.
    Anyone got any ideas for secure php mail scripts?
     
Loading...