Spam Problems

[Kevin Pang]

Hello All,

I'm a newbie and manage a FreeBSD server, which only hosts my own websites,
also only me have shell accounts on this server. Someone sent out lots of
spams from my server today. I have stopped postfix and disabled mail command
to make sure no any emails will be sent to from this server.

I want to know how the spammer did that. Actually I didn't manage postfix to
work well, I even can't send emails from my desktop myself, on the server
side, sending/receiving emails works well. I guess the spams were sent via a
web script. The sender was specified as [EMAIL PROTECTED] according to the
complaint email. I use phpBB, vBulletin and Awstats.

The spam email entry in the maillog is:
May 14 14:55:03 pang postfix/smtp[46011]: EC0C595C90: to=[EMAIL PROTECTED],
relay=mail2.iecc.com[208.31.42.98], delay=724, status=sent (250 ok
1116100192 qp 2255)


As a newbie, I have no idea where to start to fix the problem. My first
question: Is it possible to know which script sent out these spams? I don't
know what else to ask at the moment. I will appreciate it very much too if
you any other suggestions about my problems. Thanks!

Kevin


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

About Apache

[Kevin Pang]

I installed Awstat, the log report url is something like
http://www.mydomain.com/awstats/awstats.pl, I added password protection for
the directory /awstats, everything works fine. But I found someone accessed
the url http://www.mydomain.com/cgi-bin/awstats.pl, it's supposed to be a
404 error, but it is redirected to
http://www.mydomain.com/awstats/awstats.pl . My question is why the url
http://www.mydomain.com/cgi-bin/awstats.pl is working, any other options to
make it work besides rewrite, alias and link. Thanks!

Here is all related lines in httpd.conf:
---
ScriptAlias /cgi-bin/ /usr/local/www/cgi-bin/

ScriptAlias /awstats/ /usr/local/etc/awstats/wwwroot/cgi-bin/
Directory /usr/local/etc/awstats/wwwroot
Options None
AllowOverride authconfig
Order allow,deny
Allow from All
/Directory
---
Output of ll /usr/local/www/cgi-bin/,  nothing is related to /awstats/
-rw-r--r--  1 root  wheel0 Nov  3 17:24
EXAMPLE_DIRECTORY-DONT_ADD_OR_TOUCH_ANYTHING
-rw-r--r--  1 root  wheel  274 Nov  3 17:24 printenv
-rw-r--r--  1 root  wheel  757 Nov  3 17:24 test-cgi


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]