Re: Mail Attack

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

The <> messages are bounced messages. Someone may be spammed from your server and those address falied is bouncing back now. Make sure your server is secure and no one abusing it. Check for malicious scripts ...( expecially in /tmp..)...
Have a nice hunting:-)
Jessica Zhu wrote:

Hi,

It looks like we are experiencing the mail attack now.

In our maillog, we have a lot of User Unknown message like the following.

Aug 23 11:52:25 s1 sendmail[2110]: j7NFqPL02110: <Oscard@xxxxxxxxxxxxx>... User unknown Aug 23 11:52:25 s1 sendmail[2110]: j7NFqPL02110: from=<>, size=17601, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=mail.vis-inc.net [66.77.28.202]

It looks like that all the from is <>, does anyone have the way to fight against it.
Jessica


--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux