Re: [qmailtoaster] Help, I'm an open relay!!

2014-04-03 Thread Sebastian Grewe
Have you checked for hijacked accounts? Looks like all mails are sent from a single account and IP. Most likely a guessed/leaked password. Cheers, Sebastian On 03.04.2014, at 14:30, Kelly Cobean kcob...@vipercrazy.com wrote: I don't understand what's going on here, but somehow all of a

RE: [qmailtoaster] Help, I'm an open relay!!

2014-04-03 Thread Helmut Fritz
I would shut down bi...@vipercrazy.com for now and see if the relaying stops. Do you know if that was an easily hacked password? From: Sebastian Grewe [mailto:sebast...@grewe.ca] Sent: Thursday, April 03, 2014 8:42 AM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Help

Re: [qmailtoaster] Help, I'm an open relay!!

2014-04-03 Thread Sebastian Grewe
: Sebastian Grewe [mailto:sebast...@grewe.ca] Sent: Thursday, April 03, 2014 8:42 AM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Help, I'm an open relay!! Have you checked for hijacked accounts? Looks like all mails are sent from a single account and IP. Most likely

Re: [qmailtoaster] Help, I'm an open relay!!

2014-04-03 Thread Kelly Cobean
Hey Sebastian, I thought leaked password as well at first, but there are at least two accounts I see under auth: mine and one other. I suppose it's possible that they were guessed/leaked, but it's awfully coincidental that it's two accounts in the same domain on a server running at least 6

Re: [qmailtoaster] Help, I'm an open relay!!

2014-04-03 Thread Kelly Cobean
Ok, I'm gonna ask a real dumb question. When I ran squirrel mail and the old QmailRocks distro (yep, LONG time ago), I had a squirrelmail plugin to allow people to change passwords via the squirrel. Now I'm running QTP and Roundcube. I still have squirrelmail running, bu the password change

RE: [qmailtoaster] Help, I'm an open relay!!

2014-04-03 Thread Kelly Cobean
if that was an easily hacked password? FROM: Sebastian Grewe [mailto:sebast...@grewe.ca] SENT: Thursday, April 03, 2014 8:42 AM TO: qmailtoaster-list@qmailtoaster.com SUBJECT: Re: [qmailtoaster] Help, I'm an open relay!! Have you checked for hijacked accounts? Looks like all mails are sent from

Re: [qmailtoaster] Help, I'm an open relay!!

2014-04-03 Thread Finn Buhelt
Hi Kelly. Are You using the password plugin in Roundcube that allows users to change password ? Regards, Finn Den 03-04-2014 18:47, Kelly Cobean skrev: Ok, I'm gonna ask a real dumb question. When I ran squirrel mail and the old QmailRocks distro (yep, LONG time ago), I had a

Re: [qmailtoaster] Help, I'm an open relay!!

2014-04-03 Thread LHTek
: [qmailtoaster] Help, I'm an open relay!! Hey Sebastian, I thought leaked password as well at first, but there are at least two accounts I see under auth:  mine and one other.  I suppose it's possible that they were guessed/leaked, but it's awfully coincidental that it's two accounts in the same

Re: [qmailtoaster] Help, I'm an open relay!!

2014-04-03 Thread Kelly Cobean
TO: qmailtoaster-list@qmailtoaster.com SENT: Thursday, April 3, 2014 11:13 AM SUBJECT: Re: [qmailtoaster] Help, I'm an open relay!! Hey Sebastian, I thought leaked password as well at first, but there are at least two accounts I see under auth: mine and one other. I suppose it's possible that they were