Re: unauthorized spam relay!

mworden@substantis.com wrote:

> i'm not set up from secure sign on just yet (i'm still recovering from a
> major hard drive failure / server crash). i checked the http access
> logs.
> there were none shown except for access to a site i host and a user who
> accessed that site's webmail feature (its supposed to just be used for
> registration, etc.) all the "relays" are for "nobody" which is my
> server's group / user id. i have turned that feature off and blocked
> the IP addresss. any other thoughts? i'm thinking about running a
> chkroot kit (if someone knows a good "how-to" for that i'd be greatful).


Will you please stop quoting the entire message in your replies.

The first thing to do, as Scott mentioned, is to get rid of Sendmail.
Securing the system is then dependant upon which extraneous software you
are running upon the machine.

Matt