Op Thursday 31 July 2008 02:46:38 schreef Grant Peel: > Hi all, > > I am thinking a script on one of my servers has a security hole in it. A > few days ago, the server started sending out huge amounts of spam. I am yet > to find the culprit. > > In the mean time, I am seeing thousands of mailq entries like: > > 2008-07-30 18:33:50 1KOKEw-000DG6-77 <= [EMAIL PROTECTED] U=www P=local > S=2625 T="God Has Chosen You" from <[EMAIL PROTECTED]> for > [EMAIL PROTECTED] > > I am thinking that I would like to temporarily disble apache's sending of > email (from FormMail scripts), until I can track down the offending script. > > Is there a way I can do it in Exim's configure? > > -Grant
For tracking down I use php_value mail.force_extra_parameters [EMAIL PROTECTED] in every VirtualHost on my server. This way the envelope-sender will tell which VirtualHost is to blame for any problems and the occasional bounce will bounce to the correct sender. This will also work with PHP in safe-mode. -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
