[qmailtoaster] Re: interesting attack I had on my server

2010-03-10 Thread Eric Shubert
David Milholen wrote: I found the offending account that got hijacked.. Mar 9 17:18:26 ns2 vpopmail[18187]: vchkpw-smtp: (PLAIN) login success dmilho...@wletc.com:41.217.65.3 Ugh... It was mine.. I have since changed all my passwords.. Good thing I use modulo type passwords. I have used th

Re: [qmailtoaster] Re: interesting attack I had on my server

2010-03-10 Thread David Milholen
Eric Shubert wrote: David Milholen wrote: Eric Shubert wrote: David Milholen wrote: Hello All,  I am querying the list to help me find my security hole in my server. This is after I had placed this ip in the spamdyke blacklist_ip file

[qmailtoaster] Re: interesting attack I had on my server

2010-03-10 Thread Eric Shubert
David Milholen wrote: Eric Shubert wrote: David Milholen wrote: Hello All, I am querying the list to help me find my security hole in my server. This is after I had placed this ip in the spamdyke blacklist_ip file I even added the email addy to the blacklist_senders list Maybe I was impatien

[qmailtoaster] Re: interesting attack I had on my server

2010-03-10 Thread Eric Shubert
David Milholen wrote: Eric Shubert wrote: David Milholen wrote: Hello All, I am querying the list to help me find my security hole in my server. This is after I had placed this ip in the spamdyke blacklist_ip file I even added the email addy to the blacklist_senders list Maybe I was impatien

Re: [qmailtoaster] Re: interesting attack I had on my server

2010-03-10 Thread David Milholen
Eric Shubert wrote: David Milholen wrote: Hello All,  I am querying the list to help me find my security hole in my server. This is after I had placed this ip in the spamdyke blacklist_ip file I even added the email addy to the blacklist_senders list  Maybe I was i

Re: [qmailtoaster] Re: interesting attack I had on my server

2010-03-10 Thread David Milholen
Eric Shubert wrote: David Milholen wrote: Hello All,  I am querying the list to help me find my security hole in my server. This is after I had placed this ip in the spamdyke blacklist_ip file I even added the email addy to the blacklist_senders list  Maybe I was i

[qmailtoaster] Re: interesting attack I had on my server

2010-03-10 Thread Eric Shubert
David Milholen wrote: Hello All, I am querying the list to help me find my security hole in my server. This is after I had placed this ip in the spamdyke blacklist_ip file I even added the email addy to the blacklist_senders list Maybe I was impatient and the system was playing catchup. Let me