> On 6 Nov 2003 at 10:49, Jack Coates wrote: > > > based on these scans and the vger results, I don't think postfix is > > misconfigured at all; the attacker is logging in and sending those mails > > from localhost. format the drive and start over. > >
No, it is not that bad at all. http://www.mail-abuse.org/cgi-bin/lookup?198.144.206.157 lists the IP as open relay. So the Messages have been delivered by localhost. But it is not the MTA that is missconfigured, but the Web/Proxy Server. Either a Squid or a Apache mod_proxy, I guess. Markus Gonaus
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
