Re: [FreeBSD] qmail problemi

Umut D. Wed, 19 Oct 2005 00:59:25 -0700

Mail sunucunuzdan relay yapan baska bir sunucu vs var mi?
Ornegin relay izni verilmis bir web sunucu gibi. Bazi scriptlerin
aciklarindan istifade ile bu tip spamlar yapilabiliyor.


Daha otesi, kullanicilar icinde window$ kullananlarin bilgisayarlarinda
virus olabilir, boylece smtp-auth islemini de gerceklestirip outlook/express
uzerinden spam yapabilirler.

Maillerin basliklarini acip geldikleri ilk kaynagi bulmaya calisin.
Ya da loglardan takip ederek hangi uzak sistemden yola ciktiklarini
gorun derim size :)

Kolay gelsin.

Not: Bu arada gonderdiginiz ekran goruntusu hangi programa ait?

Ahmet ORHAN wrote:

Merhaba,
Qmail- Mail Queue kısmına baktığımda, yabancı adreslerden biryerleremail gönderiliyor.. Kuyruk bu yüzden sürekli dolu oluyor..Qmailde relay tanımlamaları yapılmış durumda.. Smtp-authuygulandı..ancak sunucumuz üzerinde başka başka adresler görmeye devamediyorum.Teşekkürler..............qmail-smtp.................................
#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
LOCAL=`head -1 /var/qmail/control/me`
if [ -z "$QMAILDUID" -o -z "$NOFILESGID" -o -z "$MAXSMTPD" -o -z"$LOCAL" ]; then
echo QMAILDUID, NOFILESGID, MAXSMTPD, or LOCAL is unset in
echo /var/qmail/supervise/qmail-smtpd/run
exit 1
fi
if [ ! -f /var/qmail/control/rcpthosts ]; then
echo "No /var/qmail/control/rcpthosts!"
echo "Refusing to start SMTP listener because it'll create an open relay"
exit 1
fi
exec /usr/local/bin/softlimit -m 40000000 \
/usr/local/bin/tcpserver -H -P -R -l "$LOCAL" -x/usr/local/vpopmail/etc/tcp.smtp.cdb -c "$MAXSMTPD" \
-u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
/usr/local/bin/rblsmtpd -r relays.ordb.org \
/var/qmail/bin/qmail-smtpd 2>&1
.............................................................
------------------------------------------------------------------------Messages 1 to 20 of 119<https://192.168.0.10:10000/qmailadmin/list_queue.cgi?start=20>
Select all Invert selection
        *Mail ID*       *Sent*  *From*  *To*
86224<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/20/86224>15 Oct 2005 07:58:08 <[EMAIL PROTECTED]> [EMAIL PROTECTED]86273<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/0/86273>17 Oct 2005 11:00:21 <> [EMAIL PROTECTED]86276<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/3/86276>15 Oct 2005 07:43:26 <[EMAIL PROTECTED]>[EMAIL PROTECTED]86277<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/4/86277>17 Oct 2005 10:50:22 <> [EMAIL PROTECTED]86281<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/8/86281>17 Oct 2005 08:02:20 <[EMAIL PROTECTED]> [EMAIL PROTECTED]86282<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/9/86282>14 Oct 2005 12:27:09 <[EMAIL PROTECTED]>[EMAIL PROTECTED]86283<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/10/86283>17 Oct 2005 08:44:39 <[EMAIL PROTECTED]> [EMAIL PROTECTED]86288<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/15/86288>17 Oct 2005 10:36:55 <> [EMAIL PROTECTED]86290<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/17/86290>15 Oct 2005 07:32:36 <[EMAIL PROTECTED]> [EMAIL PROTECTED]86292<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/19/86292>17 Oct 2005 09:34:33 <> [EMAIL PROTECTED]86294<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/21/86294>17 Oct 2005 08:18:43 <[EMAIL PROTECTED]> [EMAIL PROTECTED]86296<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/0/86296>17 Oct 2005 12:45:18 <[EMAIL PROTECTED]> [EMAIL PROTECTED]86301<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/5/86301>14 Oct 2005 13:51:43 <[EMAIL PROTECTED]> [EMAIL PROTECTED]86303<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/7/86303>14 Oct 2005 12:27:06 <[EMAIL PROTECTED]> [EMAIL PROTECTED]86310<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/14/86310>17 Oct 2005 07:56:14 <[EMAIL PROTECTED]> [EMAIL PROTECTED]86320<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/1/86320>17 Oct 2005 11:01:00 <> [EMAIL PROTECTED]86325<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/6/86325>17 Oct 2005 07:56:57 <> [EMAIL PROTECTED]86334<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/15/86334>17 Oct 2005 08:33:30 <[EMAIL PROTECTED]> [EMAIL PROTECTED]86335<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/16/86335>17 Oct 2005 11:01:21 <> [EMAIL PROTECTED]86337<https://192.168.0.10:10000/qmailadmin/view_queue.cgi?file=/var/qmail/queue/mess/18/86337>17 Oct 2005 12:49:13 <[EMAIL PROTECTED]>[EMAIL PROTECTED]
...........................................................................................
Ahmet ORHAN
Bilgi İşlem
ALTINBAŞAK TEKSTİL A.Ş.
Tel : 0 258 269 10 69
Fax: 0 258 269 10 70
www.altinbasak.com <http://www.altinbasak.com>




---------------------------------------------------------------------
Cikmak icin, e-mail: [EMAIL PROTECTED]
Liste arsivi: http://lists.enderunix.org
Turkiye'nin ilk FreeBSD kitabi: http://www.acikakademi.com/freebsd.php

Re: [FreeBSD] qmail problemi

Cevap