Once upon a time, Ralph Seichter via mailop <[email protected]> said:
> My ISP notified me that an IPv4 address assigned to one of my servers is
> listed on Spamhaus. This came as a big surprise, because the server in
> question is not set up to send mail to the outside world. The occasional
> cron job report is forwarded to another server of mine, but that happens
> over via private network connection (vSwitch), and only to a fixed
> recipient mail address.

So you say it's not a mail server, but presumably there's something
running on it.  You should check the other software; for example, a web
server can be compromised through installed applications (like
WordPress) and then be used to send mail directly, without going through
any other software.

For things like that, it's possible on Linux (and probably other OSes)
to configure a local firewall that disallows outbound TCP to port 25
from the web user(s).
-- 
Chris Adams <[email protected]>
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to