Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2024-04-27, 23:50:39

Author Topic: sendmail-limits does not show mails sent via perl scripts :(  (Read 2973 times)

0 Members and 1 Guest are viewing this topic.

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Something is sending massive SPAM via our servers using perl script.

I see http.pl executing mail process.

Example:

Quote
--------------
MESSAGE NUMBER 1056435
 --------------
Received: (qmail 15966 invoked by uid 7812); 8 Sep 2015 15:00:31 -0000
Date: 8 Sep 2015 15:00:31 -0000
Message-ID: <20150908150031.15964.qmail@xxx.pl>
To: reyerpenny@yahoo.com
Subject: Penny Zithromax  Price: USD 0.95
From: Nurse Top <brontosaur@atrial.com>
X-Mailer: Turnpike
X-Priority: 3
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1

http://crashgirl.com/decorum
Penny!
Zithromax  Price: USD 0.95
Zithromax (Azithromycin) is used for treating mild to moderate infections caused by certain bacteria.
Nurse Top

« Last Edit: 2015-09-11, 20:37:55 by Spacedust »

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Is you mean doesn't exits for 'sendmail' in maillog?.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Is you mean doesn't exits for 'sendmail' in maillog?.

Yes. It seems when spammer is using mailx, then it isn't shown in maillog.

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
The problem is, perl possible using like php's exec and we can't disable it like 'disable_functions' in php.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

 


Top 4 Global Search Engines:    Google    Bing    Baidu    Yahoo
Click Here

Page created in 0.044 seconds with 19 queries.

web stats analysis