Koozali.org: home of the SME Server
Obsolete Releases => SME Server 7.x => Topic started by: kansasdragon on November 14, 2006, 11:12:38 PM
-
On my SME Server 7, users are no longer able to send and receive email via POP or SMTP.
Qmail services all appear to be running on the server.
When I attempt to telnet to port 25 or 110 on this server, I just get a flashing cursor, on my other SME Server this will return the QMail Banners.
Suggestions on what I should be looking for? Process I should try?
I have tried shutting down spamd and clamd to make sure they were not blocking the process.
Thanks
-
Please tell us more about your setup i.e are you running in server-gateway ? have you got a firewall in front of your SME server?
Also have you gone to grc.com to make sure the ports are actually open?
-
The issue was found, after reviewing the logs further. The server had been hacked, we had an IP from Denmark that had gained admin rights to the server.
I reloaded fresh, restored from a recent backup, and updated, everythings up and running again, with fresh new complex passwords.
-
kansasdragon
> restored from a recent backup
Are you sure that the backup does not contain hacker code, which will allow access again ?