Author: Suresh Ramasubramanian Date: To: Ravi CC: exim-users Subject: Re: [Exim] how to trace user mailsending mails as "nobody"
On Wed, Jun 30, 2004 at 04:04:13PM -0400, Ravi wrote: > 1.On my shared hosting (cpanel) , One user sending mails(spam)
> as 'nobody'. Is there any way to trace that username , so i can delete
> him/her.
that's the uid/gid of the webserver.
look for insecure perl or php scripts that are being used to inject email
use suexec for perl, and there's something called suphp I think.
> 2.Is there any way to stop scripts like perl to send mails using by
> connecting
> directly port number 25 (ignoring mail server) ?
If he's running a cgi that he's uploaded to your server - sure.
