[Cialug] Hijack This! (Equivalent on Linux?)

Dave Weis cialug@cialug.org
Fri, 28 Jan 2005 09:35:16 -0600


> I've both done a lot on this problem, and not near enough.   Some idiots 
> in the world have decided to hijack my server as a Relay host for 
> Spam.   I have only three entries in my /etc/mail/relay-domains listing, 
> and these entries are NOT the domain from which they accomplish this spoof.

It's possible that it's a joe job, when someone puts your from address 
on spam and you get the bounces. Looking at network traffic either you 
aren't sending much or it isn't actually going through your server.

Check in /var/log/maillog and see if they are going in and out, or 
forward a bounce message with full headers to the list.

dave