[qmailadmin] disturbing
some time ago I reinstalled my mail server and before I did that I took a copy of /var/qmail for backup. Then yesterday I was searching for something and wondered what was in a file called A19013.1053705155 in the webmaster account folder (it's a mail robot). I guessed that it is the file holding the address to where the robot should forward any resived mails, but to my surprise the address inside was [EMAIL PROTECTED] ?!?!?! I checked the same file in my current /var/qmail and the address in there was the right one, so right now everything is as it should be but how did [EMAIL PROTECTED] get in that file? ls -l of the backup -rw---1 vpopmail vchkpw 21 May 23 2003 A19013.1053705155 -rw---1 vpopmail vchkpw154 Apr 8 2003 message ls -l of the current -rw---1 vpopmail vchkpw 23 Mar 8 23:33 A20362.1078785226 -rw---1 vpopmail vchkpw154 Apr 8 2003 message Note that in the current the A20362.1078785226 file was modified Mar 8 this year, and I didn't do that ? in lastlog I can see that it only is me and root (also me)that have logged into this server, on one else have ever logged in. Is there a security problem in qmailadmin? Does qmail admin have a log (that I can't find) so I can see when changes ware done by who? Any suggestions to how I can trace how this was done? The biggest question is why would anybody redirect mails to my webmaster account to Microsoft? brgds Ulrik
Re: [qmailadmin] disturbing
Ulrik S. Kofod wrote: some time ago I reinstalled my mail server and before I did that I took a copy of /var/qmail for backup. Then yesterday I was searching for something and wondered what was in a file called A19013.1053705155 in the webmaster account folder (it's a mail robot). I guessed that it is the file holding the address to where the robot should forward any resived mails, but to my surprise the address inside was [EMAIL PROTECTED] ?!?!?! It is from address I think, from microsoft script viruses. -- Eero
Re: [qmailadmin] disturbing PLEASE disregard
I just found that the file just holds the last address from where a mail was resived. I just panicked because I saw microsoft I guess ;) sorry
[qmailadmin] --enable-modify-spam and --enable-spam-command=CMD
Hi Which dotqmail file (and it's location!?) is qmailadmin editing when using --enable-modify-spam ? Is it per domain or user? (--enable-modify-spam Allow users to enable/disable spam checking.) And what CMD are you using here? --enable-spam-command=CMD Remember to use '|preline' at the beginning, |preline /usr/local/bin/maildrop /etc/mailfilter. Thanks Lars
RE: [qmailadmin] --enable-modify-spam and --enable-spam-command=CMD
It edits the .qmail-username file in your domains directory. -Original Message- From: Lars E. D. Jensen [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 2:56 AM To: [EMAIL PROTECTED] Subject: [qmailadmin] --enable-modify-spam and --enable-spam-command=CMD Hi Which dotqmail file (and it's location!?) is qmailadmin editing when using --enable-modify-spam ? Is it per domain or user? (--enable-modify-spam Allow users to enable/disable spam checking.) And what CMD are you using here? --enable-spam-command=CMD Remember to use '|preline' at the beginning, |preline /usr/local/bin/maildrop /etc/mailfilter. Thanks Lars
Re: [qmailadmin] --enable-modify-spam and --enable-spam-command=CMD
Nick Twaddell wrote: It edits the .qmail-username file in your domains directory. my version (1.2.0) edits .../domain/user/.qmail -Original Message- From: Lars E. D. Jensen [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 2:56 AM To: [EMAIL PROTECTED] Subject: [qmailadmin] --enable-modify-spam and --enable-spam-command=CMD Hi Which dotqmail file (and it's location!?) is qmailadmin editing when using --enable-modify-spam ? Is it per domain or user? (--enable-modify-spam Allow users to enable/disable spam checking.) And what CMD are you using here? --enable-spam-command=CMD Remember to use '|preline' at the beginning, |preline /usr/local/bin/maildrop /etc/mailfilter. for some reason I can't remember preline did not work for me, I use: |/usr/bin/maildrop /etc/maildroprc --franz
Re: [qmailadmin] --enable-modify-spam and --enable-spam-command=CMD
for some reason I can't remember preline did not work for me, I use: /usr/bin/maildrop /etc/maildroprc I can't get preline to work either... What's the purpose of including preline anyway? /Lars
Re: [qmailadmin] --enable-modify-spam and --enable-spam-command=CMD
I can't get preline to work either... I should say that I now use: | spamc -t 45 | /var/vpopmail/bin/vdelivermail '' bounce-no-mailbox
