How to list all user passwords

[musictus]

Hello

After hours of work, I found how people was sending out spam from my server. It was via a weak user password, using smtp-auth.

Is there a quick way to list all user accounts and their email password, so that I can prevent this happens again, by adding more strong password?

Thanks!

 

[IgorG]

You can find all email passwords with following SQL query:

select mail_name,name,password from mail left join domains on mail.dom_id = domains.id inner join accounts where mail.account_id = accounts.id and postbox='true' order by name asc, mail_name asc;;

If password is crypted use following command for decryption:

# perl -MMIME::Base64 -le 'print decode_base64("$password")'

 

[musictus]

Thanks!

Thanks very much!