AFP548 Changing the world one server at a time.

10.4.3 Server used for Phishing

Home › Forums › OS X Server and Client Discussion › Mail › 10.4.3 Server used for Phishing

  • This topic is empty.
Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • #364305
    Anonymous
    Guest

    I discovered yesterday that someone has found a vulnerability in the webmail, I think it is the webmail anyway. They were able to send email using www@myserver. I am not sure of where to look in the logs to find out who did this or how to correct it. After it was discovered I checked the Activity Monitor and python was using 98% of the CPU and there were 1600 undelivered emails in /var/spool/postfix/bounce. Are there any know issues that you are aware of?
    Thanks!

    #364329
    Anonymous
    Guest

    When you say use awstats in a secure realm do you mean that I should not allow everyone to read it? Since it isn’t in a directory, its a cgi-executable, what do I need to do to limit access to it?
    Thank you very much for you help

Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.