Re: [Exim] how to trace user mailsending mails as "nobody"

On Wed, Jun 30, 2004 at 04:04:13PM -0400, Ravi wrote:
> 1.On my shared hosting (cpanel) , One user sending mails(spam)
> as 'nobody'. Is there any way to trace that username , so i can delete
> him/her.

that's the uid/gid of the webserver.

look for insecure perl or php scripts that are being used to inject email

use suexec for perl, and there's something called suphp I think.

> 2.Is there any way to stop scripts like perl to send mails using by
> connecting
> directly port number 25 (ignoring mail server) ?

If he's running a cgi that he's uploaded to your server - sure.

Lots of perl modules that can act as smtp clients

--
linux@??? (Suresh Ramasubramanian)