Postfix hit again (Spam)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

After the rebuild, everything was fine for 24 hours and it happened again.

I did uncomment some mods that I was not using in Apache. Maybe that helped a
bit.  I am going through all the mods to make sure I need them or not.

As soon as this happened, before shutting down postfix did the following:
lsof
netstat -atu
Of course I piped them to text files.
Here is a link to them both. To long to post them here.
During the incident:
http://code-heads.com/lsof.txt
http://code-heads.com/net.txt
As you can see there was connections. But it was from my own network???

Here is after I shut down postfix:
http://code-heads.com/lsof1.txt
http://code-heads.com/net1.txt
Normally I do not like to post this on my site but I think someone can help
here.

Looks like they are coming in through Apache???

Apache => httpd-2.0.54-10.3
OS => Fedora4
SELinux => enforcing mode

If you need any more info let me know.

Sorry, still learning all this stuff.

I am going through these file now to see the difference.

Geesh, this is getting ridiculous LOL

Will
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEclO1fw3TK8jhZrsRAqTlAKDBddPMv5J6vwrqhkp4uwdO0PlbOgCfRh5z
6SAPoEIspox2A8NRlkRE9p4=
=66Ck
-----END PGP SIGNATURE-----


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux