From owner-freebsd-questions@FreeBSD.ORG Sat Jun 17 13:46:29 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1DF7B16A474 for ; Sat, 17 Jun 2006 13:46:29 +0000 (UTC) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from mail4.sea5.speakeasy.net (mail4.sea5.speakeasy.net [69.17.117.6]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2961A43D46 for ; Sat, 17 Jun 2006 13:46:28 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: (qmail 28631 invoked from network); 17 Jun 2006 13:46:27 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail4.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 17 Jun 2006 13:46:27 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id 570ED28449; Sat, 17 Jun 2006 09:46:27 -0400 (EDT) To: "Scott Kaplan" To: freebsd-questions@freebsd.org References: From: Lowell Gilbert Date: Sat, 17 Jun 2006 09:46:27 -0400 In-Reply-To: (Scott Kaplan's message of "Fri, 16 Jun 2006 09:22:51 -0400") Message-ID: <4464izgaj0.fsf@be-well.ilk.org> User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.0.50 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Subject: Re: pop mail password error X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd-questions@freebsd.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Jun 2006 13:46:29 -0000 "Scott Kaplan" writes: > After a hacker got on my server I can't gather mail by pop I get a > password error even though I log on as root and use passwd to change > passwords I subscribed to freebsd hackers mailing list but when I try > to log on I get roster authentication error The hacker also sent out > 250,000 emails each with attached viruses to invalid recipients > causing them all to be returned to the server as failed mail > Let me know if you can help Sorry to be of any trouble I'm unable to > get help elsewhere cause I'm blacklisted on mirc by the same criminal > group who did this to my server The authorities not interested in > helping me so far Let me know if you can help me repair my server and > gather my mail or how to use the mailing list Thank You, Scott Kaplan If a hacker was running free on the server, you need to reinstall and restore your data securely, because there's no way to be sure that the hacker didn't install a variety of back doors to get in again. The hacker may well have subverted the POP daemon; or, more likely, the authentication mechanism it's using.