Koozali.org: home of the SME Server

Am I hacked?

glindsay

Am I hacked?
« on: April 15, 2004, 11:36:07 PM »
I've been looking through my logs lately and noticed some things that look to me rather suspicious.  But I may be reading them incorrectly.

I have checked to see if I'm open as a relay agent but that proved false.

My question is: Which log file analysis report should I look at to see if someone is using me to send spam?

And what in that report should I be looking for?

Thank you.
-garrett

Offline NickR

  • *
  • 283
  • +0/-0
    • http://www.witzendcs.co.uk/
Am I hacked?
« Reply #1 on: April 16, 2004, 10:56:53 PM »
Run iptraf from the console & get it to log activity on eth1 (or whatever the external interface is).  Leave to to log for a few hours & examine log.
--
Nick......

RavenIV

Am I hacked?
« Reply #2 on: April 16, 2004, 11:42:17 PM »
i you left your SME to standard, you are not an open relay.

cheers klaus