From owner-freebsd-questions Mon Jan 4 11:47:07 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA24732 for freebsd-questions-outgoing; Mon, 4 Jan 1999 11:47:07 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from corp.au.triax.com (slwag1p09.ozemail.com.au [203.108.157.25]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA24724 for ; Mon, 4 Jan 1999 11:47:03 -0800 (PST) (envelope-from jim@corp.au.triax.com) Received: from localhost (jim@localhost) by corp.au.triax.com (8.9.2/8.9.2) with ESMTP id GAA00727; Tue, 5 Jan 1999 06:46:21 +1100 (EST) Date: Tue, 5 Jan 1999 06:46:20 +1100 (EST) From: Jim Mock To: Jai Durgam cc: freebsd-questions@FreeBSD.ORG Subject: Re: Sendmail Security - URGENT In-Reply-To: <3691171D.68EC4E15@lan.nsc.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, 4 Jan 1999, Jai Durgam wrote: > Hi, a friend has an server that is his web server and the > internet sendmail server (uses freebsd). Over the past few weeks, > there are a number of sendmail processes that are running and owned > by spammers from aol, popsite.net and other sites. > > How do we turn it off? Please reply ASAP to jai@ipaje.com or > sudhax@ragalaya.com > What version of sendmail is it? It sounds like it's got an open relay. Your (his) best bet is to upgrade sendmail to the latest version (8.9.2 was released Dec 31st). The new versions deny relay by default. You can get the source from ftp.sendmail.org/pub/sendmail/ and more info from http://www.sendmail.org/ -- : Jim Mock | [jim@corp.au.triax.com] : : System Administrator | http://www.triax.com/ : : Triax Internet Services | ----------------------------- : : Portland, OR USA | FreeBSD: The Power to Serve : : Wagga Wagga, NSW Australia | http://www.freebsd.org/ : To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message