From owner-freebsd-questions@FreeBSD.ORG Sun Jan 14 05:52:31 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id E197616A40F for ; Sun, 14 Jan 2007 05:52:31 +0000 (UTC) (envelope-from jdow@earthlink.net) Received: from elasmtp-banded.atl.sa.earthlink.net (elasmtp-banded.atl.sa.earthlink.net [209.86.89.70]) by mx1.freebsd.org (Postfix) with ESMTP id B5A1113C489 for ; Sun, 14 Jan 2007 05:52:31 +0000 (UTC) (envelope-from jdow@earthlink.net) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=dk20050327; d=earthlink.net; b=mCioTD2nc2kn7lZIENpr5FX1s/KXKJ/MMLmBXJ8McEN+nUA0boaL8Twsg/U2vSbE; h=Received:Message-ID:From:To:References:Subject:Date:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE:X-ELNK-Trace:X-Originating-IP; Received: from [208.127.11.96] (helo=wednesday) by elasmtp-banded.atl.sa.earthlink.net with asmtp (Exim 4.34) id 1H5y4y-0004RF-S4 for freebsd-questions@freebsd.org; Sun, 14 Jan 2007 00:38:53 -0500 Message-ID: <03ea01c7379e$47cac520$0225a8c0@wednesday> From: "jdow" To: References: <20070113213137.52669.qmail@simone.iecc.com> Date: Sat, 13 Jan 2007 21:38:54 -0800 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.3028 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028 X-ELNK-Trace: bb89ecdb26a8f9f24d2b10475b571120dd3b678e9cdc2ff43f1409ed7231e83e18bcfccd46e16a59350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c X-Originating-IP: 208.127.11.96 Subject: Re: question on smtp AUTH X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Jan 2007 05:52:32 -0000 From: "John Levine" > >I am wondering about the possibility of someone using a working login >>and password to send spam through my server. So here is my question; > > That's depressingly common. Look for abandoned or unused accounts > like guest/guest. www@3s1.com - that causes me to wonder if you have a hacked web server php script that is doing the sending. {^_^} Joanne