EMERGENCY - need to secure my server against an ongoing SPAMMER

[Sam Varshavchik]

Bob Brennan writes:

> Sorry for the brevity here but I woke this morning to find my
> mailserver sending 1000+ rejected email notices to postmaster@, and it
> was increasing by the minute. I have shut down Sendmail and am
> removing all relay permissions (I hope) but have a few issues that
> need to be resolved quickly before going back online - knowing the
> spammer will be retrying and my legitimate users are losing services.

If you don't know how your server was compromised, you must reformat the 
hard drive and reinstall from scratch.

The attacker has probably left a back door by which the attacker can gain 
access and seize control of your server again, at will.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20050311/25fc1a85/attachment-0001.sig>