Koozali.org: home of the SME Server
Obsolete Releases => SME Server 7.x => Topic started by: bpivk on December 13, 2007, 12:09:56 AM
-
I think i messed up my server when i tryed to fix a problem i was having so i hope some of you can help me solve the problem.
My friend had access to my internet connection and surfed on some websites that installed malware on his computer which started to send spam. I noticed this after 3000 mails bouncesd from my server and unpluged his computer from my connection. Then i checked the qmail cache and noticed that i still have some mail that has to be sent (1200) so i deleted (well actually moved) the files to a temporary directory.
I moved all the files in var/qmail/queue (bounce, info, mess and remote). Now my mail won't send or receive mail. I can't send mail if i send some from my domain to another domain i own. And if i send a mail to any other external mail account the server just puts it in a queue and it never sends it.
eg:
messages in queue: 2
messages in queue but not yet preprocessed: 2
Does anyone know how to fix this by removing and reinstalling qmail or something similar?
753 config setprop qmail status disabled
754 config show qmail
755 config setprop qmail status enabled
757 /var/qmail/bin/qmail-qstat
777 /sbin/e-smith/config setprop smtpfront-qmail Proxy enabled
778 /etc/rc7.d/S*qmail restart
779 /sbin/e-smith/config setprop smtpfront-qmail Proxy disabled
Theese are all the relevant commands i used when i wanted to clean the cache.
P.S.: I didn't report this as a bug because it's my error not a bug.
-
Never mind. I think that i got it working again. The mistake was deleting the numberd folders in info, remote,... I transfered all the folders back and it works now.
The only two questions that remain are:
Should i set smtpfront-qmail Proxy back to enabled or is this some old setting that i don't need?
And do you have any ideas how to prevent this in the future? Blocking the port 25 on his computer is ok but can i do something server-side.
-
Does anyone know how to fix this by removing and reinstalling qmail or something similar?
rpm -Uhv --force http://smemirror.fullnet.co.uk/releases/7.2/smeos/i386/SME/RPMS/qmail-1.03-13.el4.sme.i386.rpm
-
...do you have any ideas how to prevent this in the future?
Configure SMTP authentication for LAN clients?
http://wiki.contribs.org/Email#How_do_I_enable_smtp_authentication_for_users_on_the_internal_network.
-
Thanks mmccarn i think that this is exactly the thing i was searching for.