Topic: Possible mail hijacking

[Chris Curtis]

Hello All.  I have a e-smith server, Ver 5.6 with all the updates applied.  It seems that someone is sending mail through it.  I was under the impression that patched SME was secure (at least sendmail would not relay).  

Of course, looking at all the logs, things seem fine. But looking at the "sendmail style logs" shows that remote machines are requesting a relay, and the system is relaying their mail.  

Where can I go to shutoff relaying within sendmail.  Any ideas?

Chris Curtis

[Chris Curtis]

Hello All.  I thought I'd respond to my own posting.  I have to admint I feel like a dips*it, but I'm glad.  

I thought a server I had build had been hijacked or 0wn3D because I received a spam from the server in question.  I now realize that in the mail settings I set e-smith to send me any mail addresses to postmaster@thecompanyinquestion.com.

No, e-smith was not hacked, it was just doing as it's master had told it to.  Good OS.

Chris Curtis