I discovered yesterday that someone has found a vulnerability in the webmail, I think it is the webmail anyway. They were able to send email using www@myserver. I am not sure of where to look in the logs to find out who did this or how to correct it. After it was discovered I checked the Activity Monitor and python was using 98% of the CPU and there were 1600 undelivered emails in /var/spool/postfix/bounce. Are there any know issues that you are aware of?
Thanks!
When you say use awstats in a secure realm do you mean that I should not allow everyone to read it? Since it isn’t in a directory, its a cgi-executable, what do I need to do to limit access to it?
Thank you very much for you help