Vincenzo,

thanks for all the help. I will delete those messages.

Unfortunately, quite a lot have a date that is after I set up SMTPAuth... so
not quite sure what to do about that.
I have telneted to the smtp server, and smtp auth seems to be working ok...

I will change the passwords of my accounts (only have three passwords, the
admin password, my password, and postmaster password).

Hopefully changing the passwords might stop it - but I suspect that this
isn't the problem.

james

----- Original Message -----
From: "Vincenzo Gianferrari Pini" <[EMAIL PROTECTED]>
To: "James Users List" <[EMAIL PROTECTED]>
Sent: Thursday, November 06, 2003 5:22 PM
Subject: RE: Lots of unauthorized emails


James,

yes, those are all messages waiting to be sent. Just delete all the files
(better to stop James before doing that).

Have a look at the date/time: are thy <= to the moment you did set up
SMTPAuth? if yes, it is likely that you have been exploited as an open
relay, otherwise it sounds something to investigate further.

Ciao,

Vincenzo

> -----Original Message-----
> From: James Kearney(hotmail) [mailto:[EMAIL PROTECTED]
> Sent: gioved� 6 novembre 2003 16.43
> To: James Users List
> Subject: Re: Lots of unauthorized emails
>
>
> Vincenzo,
>
> JAMES_ROOT/apps/james/var/mail/outgoing directory is full of
> files, 8864 to
> be exact.
> Is this mail that is waiting to be sent, and can i just delete all the
> files?
> After doing this I will change the administrators account and all users
> account passwords again - hopefully this will stop the abuse.
>
> thanks v much
>
> james.
>
> ----- Original Message -----
> From: "Vincenzo Gianferrari Pini" <[EMAIL PROTECTED]>
> To: "James Users List" <[EMAIL PROTECTED]>
> Sent: Thursday, November 06, 2003 3:24 PM
> Subject: RE: Lots of unauthorized emails
>
>
> Have a look at the
> JAMES_ROOT/apps/james/var/mail/outgoing directory
> if using file based repositories, or
> select * from spool where repository_name='outgoing'
> if using jdbc based repositories.
>
> Vincenzo
>
> > -----Original Message-----
> > From: James Kearney(hotmail) [mailto:[EMAIL PROTECTED]
> > Sent: gioved� 6 novembre 2003 16.05
> > To: [EMAIL PROTECTED]
> > Subject: Lots of unauthorized emails
> >
> >
> > Hi,
> >
> > I am running the james server on jameskearney.com and I am
> getting lots of
> > emails saying "could not send email to xxx" where xxx is some
> > address that I
> > have never heard of - so obviously someone unauthorized is using
> > my server.
> >
> > I have smtp auth set up - so I don't believe that it is the
> case that the
> > smtp server is an open relay.
> >
> > I also have changed the passwords on the smtp accounts - this
> > also does not
> > help.
> >
> > The only possibility is that all of these messages were spooled
> > in the short
> > time before I got smtp auth set up - is there anyway I can check what is
> > waiting to be sent, and remove it if it is not appropriate.
> >
> > Failing this I am unsure as to how these nasty people are using
> > my server to
> > send their junk!
> >
> > Please help, I don't want to add to the spam problem!
> >
> > thanks very much
> >
> > james kearney
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to