Howdy,

We've recently setup a webserver, and everything seemed to be running smoothly, up until tonight, we came accross something.
We got some e-mail messages that were delivery failures, sent out from ficticious accounts on our box. Admittidly, I know next to nothing about the mail end of things, but Cpanel makes this sort of stuff pretty easy. Anyone know why these would be being sent? Any way to prevent stuff like this? Tips on securing things a little more? Somewhere for me to read up on mail ;)

Any advice is appreciated.
Thanks in advance.

Warren

open smtp maybe?

Do you have any accounts hosted on the box, someone might be using sendmail and spamming, check the maillog

Maybe someone from your local clients are spamming? See the process log and check system logs

Originally posted by 555
open smtp maybe? Most likely explanation. There should be a cpanel script in /scripts/* which should close open relays

If you have formmail in use on the server - make sure it's updated. Old ones can be used by spammers. It's important that you talk to your support about this asap.