1. Please take a little time for this simple survey! Thank you for participating!
    Dismiss Notice
  2. Dear Pleskians, please read this carefully! New attachments and other rules Thank you!
    Dismiss Notice
  3. Dear Pleskians, I really hope that you will share your opinion in this Special topic for chatter about Plesk in the Clouds. Thank you!
    Dismiss Notice

Postfix spam

Discussion in 'Plesk 9.x for Linux Issues, Fixes, How-To' started by zeroborg, Oct 6, 2011.

  1. zeroborg

    zeroborg Basic Pleskian

    23
    57%
    Joined:
    May 8, 2006
    Messages:
    35
    Likes Received:
    0
    Hello,

    i have Plesk 9.3.0 installed on a Suse 64bit.
    I also have postfix 2.5.1 installed.
    Lately, i have 3 incidents of spam THROUGH my server. Below are the logs:
    ==============
    Oct 6 08:55:33 xxxx postfix/qmgr[25982]: 176402016A3A: from=<CartaSi_services@cartasi.it>, size=8438, nrcpt=50 (queue active)
    Oct 6 08:55:33 xxxx postfix/qmgr[25982]: 1E6C02016AAA: from=<CartaSi_services@cartasi.it>, size=8438, nrcpt=50 (queue active)
    Oct 6 08:55:33 xxxx postfix/qmgr[25982]: E85D12016DA7: from=<CartaSi_services@cartasi.it>, size=8438, nrcpt=50 (queue active)
    Oct 6 08:55:33 xxxx postfix/qmgr[25982]: 668F02017603: from=<CartaSi_services@cartasi.it>, size=8438, nrcpt=50 (queue active)
    Oct 6 08:55:33 xxxx postfix/qmgr[25982]: B3A012016DA6: from=<CartaSi_services@cartasi.it>, size=8438, nrcpt=50 (queue active)
    ==============
    The strange is that at the log file, there is NO postfix/smtpd BEFORE the postfix/qmgr and becauce of that i can't find how he manage to spam through my server.
    I searched for rootkits, none. For any php progs, none.
    My relay is closed (smtp through authorization).
    Is there a way to find how he manage to spam?
    Can i upgrade the postfix without breaking the PLESK?

    Please, advice.

    Thank you.

    Zero.
     
Loading...