Re: [qmailtoaster] Virus problem

2009-07-30 Thread Aleksander Podsiadly
W dniu 29.07.2009 22:01, Natalio Gatti pisze: Maybe I didn'y explain myself. The infected user sends spam using my mail server. Maybe your server is hacked. :( You should check logs, directories with write permission for all. There are many dictionary attacks on ports ssh and pop3. Check

Re: [qmailtoaster] Virus problem

2009-07-30 Thread PakOgah
Natalio Gatti wrote: Hi List. I'm having an intermitten virus problem. From time to time a user gets infected with a virus/worm that send tons of spam through the server. All users are behind a NAT, so I can't know exactly which user/PC is the source of the problem. How can I minimize this

Re: [qmailtoaster] Virus problem

2009-07-30 Thread Natalio Gatti
Maybe I didn'y explain myself. The infected user sends spam using my mail server. Maybe your server is hacked. :( You should check logs, directories with write permission for all. There are many dictionary attacks on ports ssh and pop3. Check ssh daemon (if you're hacked you probably

[qmailtoaster] Virus problem

2009-07-29 Thread Natalio Gatti
Hi List. I'm having an intermitten virus problem. From time to time a user gets infected with a virus/worm that send tons of spam through the server. All users are behind a NAT, so I can't know exactly which user/PC is the source of the problem. How can I minimize this problem? Natalio

Re: [qmailtoaster] Virus problem

2009-07-29 Thread Aleksander Podsiadly
W dniu 29.07.2009 19:46, Natalio Gatti pisze: Hi List. I'm having an intermitten virus problem. From time to time a user gets infected with a virus/worm that send tons of spam through the server. All users are behind a NAT, so I can't know exactly which user/PC is the source of the problem.

Re: [qmailtoaster] Virus problem

2009-07-29 Thread Natalio Gatti
On Wed, Jul 29, 2009 at 3:28 PM, Aleksander Podsiadly a...@westside.kielce.pl wrote: W dniu 29.07.2009 19:46, Natalio Gatti pisze: Hi List. I'm having an intermitten virus problem. From time to time a user gets infected with a virus/worm that send tons of spam through the server. All users

Re: [qmailtoaster] Virus problem

2009-07-29 Thread RICARDO BARROS
Block and log with iptables. Ricardo Barros Manaus - AM - Brazil 2009/7/29 Aleksander Podsiadly a...@westside.kielce.pl W dniu 29.07.2009 19:46, Natalio Gatti pisze: Hi List. I'm having an intermitten virus problem. From time to time a user gets infected with a virus/worm

RE: [qmailtoaster] Virus problem

2009-07-29 Thread Vincent DeschĂȘnes
does not have access to the credentials to authenticate.) VD From: Natalio Gatti [mailto:nga...@gmail.com] Sent: Wednesday, July 29, 2009 1:46 PM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Virus problem Hi List. I'm having an intermitten virus problem. From time

Re: [qmailtoaster] Virus problem

2009-07-29 Thread Natalio Gatti
2009/7/29 RICARDO BARROS ricardo.barros...@gmail.com Block and log with iptables. From my server point of view, I see a single IP address (rememeber that the clients are behind NAT), so I can not control number of simultaneous connectios.

Re: [qmailtoaster] Virus problem

2009-07-29 Thread Natalio Gatti
] *Sent:* Wednesday, July 29, 2009 1:46 PM *To:* qmailtoaster-list@qmailtoaster.com *Subject:* [qmailtoaster] Virus problem Hi List. I'm having an intermitten virus problem. From time to time a user gets infected with a virus/worm that send tons of spam through the server. All users are behind

Re: [qmailtoaster] Virus problem

2009-07-29 Thread Aleksander Podsiadly
W dniu 29.07.2009 20:39, Natalio Gatti pisze: I saw your post, but using a proxy does not seem to be a solution for me. I already scan mails with clamav and spamassassin. I don't see which other benefits brings up to use that proxy. The spam sent by the infected machine does not contains

Re: [qmailtoaster] Virus problem

2009-07-29 Thread Natalio Gatti
On Wed, Jul 29, 2009 at 4:50 PM, Aleksander Podsiadly a...@westside.kielce.pl wrote: W dniu 29.07.2009 20:39, Natalio Gatti pisze: I saw your post, but using a proxy does not seem to be a solution for me. I already scan mails with clamav and spamassassin. I don't see which other benefits

Re: [qmailtoaster] Virus problem

2009-07-29 Thread Johannes Weberhofer, Weberhofer GmbH
I highly recommend to force the users to use Submission-Port 587 instead of SMTP, which forces senders to authenticate against the server. Most spam-senders do not have credentials for sending. In case they have, you can simply locate the spam originators (and block them) Johannes Am