On Friday 19 January 2007 06:01, Markus Hardiyanto wrote:
> Please help, my server IP is being blacklisted at CBL.abuseat.org
>
> they said that there is process or user on my server is impersonating the
> domain it's sending mail to in its HELO.
Well, it's very common for ratware to do that, but you would have to try hard
to make Exim do it (OK, it's not that hard, but it's nothing you do by
mistake). And nothing in Exim's configuration stops other programs from
sending mail directly with SMTP - to stop that you need a firewall setup. It
seems possible that your server has been cracked, especially since it's a web
server.
--
Magnus Holmgren holmgren@???
(No Cc of list mail needed, thanks)
"Exim is better at being younger, whereas sendmail is better for
Scrabble (50 point bonus for clearing your rack)" -- Dave Evans
