Re: [Exim] how to trace user mailsending mails as "nobody"

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Suresh Ramasubramanian
Ημερομηνία:  
Προς: Ravi
Υ/ο: exim-users
Αντικείμενο: Re: [Exim] how to trace user mailsending mails as "nobody"
On Wed, Jun 30, 2004 at 04:04:13PM -0400, Ravi wrote:
> 1.On my shared hosting (cpanel) , One user sending mails(spam)
> as 'nobody'. Is there any way to trace that username , so i can delete
> him/her.


that's the uid/gid of the webserver.

look for insecure perl or php scripts that are being used to inject email

use suexec for perl, and there's something called suphp I think.

> 2.Is there any way to stop scripts like perl to send mails using by
> connecting
> directly port number 25 (ignoring mail server) ?


If he's running a cgi that he's uploaded to your server - sure.

Lots of perl modules that can act as smtp clients

--
linux@??? (Suresh Ramasubramanian)