<quote who="Kevin Saenz"> > Ok I looked a little further in my logs and found that I wasn't > compromised. Basically there were just too many connections from > the following IP addresses
> By the time my logs caught up it appeared that the emails were > internally driven from first glance. > Now I just have to find out how the hell they relayed from my server Do you run any mail-sending CGI scripts such as FormMail on the same machine, or on a webserver within your mail server's mynetworks? - Jeff -- linux.conf.au 2004: Adelaide, Australia http://lca2004.linux.org.au/ "I'm offering you my body, and you're offering me semantics." - Caitlin, Clerks -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
