The maillog has entries that coincide with the suspected spam transmission times. Also, the entries include 'mailer=relay' and 'relay=[127.0.0.1]'. We do not use the RH Server for mail at all, but I did notice that 'sendmail' is enabled, so I disabled it. What else do we need to do?
So, you do not want the system to manage mail at all? OK. Do the following as the root user:
1. Disable sendmail: "chkconfig sendmail off"
2. Stop sendmail: "service sendmail stop"
3. Block incoming connections to this system on ports 25, 110, and 143 with your firewall.
4. If at some point you do want to have sendmail running on a Red Hat system, follow the instructions on the following document:
http://www.simpaticus.com/linux/sendmail-smtp-auth-howto.html
-- Rodolfo J. Paiz rpaiz@xxxxxxxxxxxxxx
-- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list