Various qmail problems

[neusagudo]

Hello,

From a few days now I have a really strange problem... I am receiving a lot of spam into the local qmail queue, it's all addressed to non-existant mailnames from my vhosts domains...

This is quite suddenly, as qmail is supposed to refuse mails destinated to non-existant mailnames.

I don't know what's wrong here, but I have problems continously, and as I didn't find any immediate solution, I gotta keep manually deleting those messages through qmHandle...

Someones has encountered this???

Thanks!

 

[pdreissen]

Most probably you are dealing with a unsecure php app or cgi script.

So spambots are sending mail through those scripts!

Please check the headers of the email which are in your queue and look for something like this in the receive headers:

Received: (qmail 4683 invoked by uid 48)

The invoked by uid coresponds with the user id on your server... most likely apache!

 

[neusagudo]

Thank you for your answer,

I checked what you told me to, and found that were generated by "network".

It doesn't seem as if I got spambot, as I already checked all that I could.

I changed email options within plesk to deliver non-existant users's emails to a blackhole and now seems to be working fine...

Thanks anyway, is good to know some tactics!!