Email (Major Problem) =>

[Paul Howarth]

On Thu, 2006-05-18 at 19:01 -0400, CodeHeads wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Thu, 18 May 2006 15:49:11 -0700 "Kayvan A. Sylvan" <kayvan at sylvan.com> wrote:
> 
> > Set up a good firewall and install OSSEC-HIDS ( http://www.ossec.net ) 
> > on your machine. It has a great analysis engine and will catch
> > intrusions into your system.
> > 
> > Why are you following qmail installation instructions for sendmail?
> > 
> > 			---Kayvan
> 
> LOL, I guess that I did not make it clear enough.  As "noted" before.
> 
> Machine 1 => The "Web Server" is running just "sendmail"
> 
> Machine 2 => The "Email Server" is running "Qmail" with the instructions that
> that site I mentioned.
> 
> Is this clear enough?? LOL

No. You still haven't said which one of the machines is sending out the
spam.

Did you reinstall the same web apps on the web server that you had
before, i.e. could exactly the same exploit have been re-applied?

Paul.