Need Plesk/Linux/smtp help - any pros around tonight - GoFuckYourself.com

pussyluver · 04-03-2003, 07:53 PM

I have a server with Plesk on a linux server. I need to turn off SMTP traffic until I can figure out what happened.

I'm relaying traffic from a spammer. Yes relaying is closed. Plesk moved sendmail and uses qmail. just neet to shut down smtp till I can get plesk help in the morning.

./sendmail stop doesn't work - I've beat my head aginst google trying to find the right path and commands..

Any help appeciated.

Thanks

NetRodent · 04-03-2003, 07:55 PM

The command 'ps ax' will give you a nice printout of what's running on the system. Find the right process and kill it.

pussyluver · 04-03-2003, 08:01 PM

thanks - a linux novice here! was so suppose to be doing galleries, not learning the OS.... managed support would help and cost.

pussyluver · 04-03-2003, 08:14 PM

Thanks!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

was able find and kill the process!!!!!!!!!!!!!!

pussyluver · 04-03-2003, 08:17 PM

NetRodent - You're the man!!!!!!

Smegma · 04-03-2003, 10:40 PM

Just an FYI - Plesk has a built in sendmail backdoor through a file called FormMail.pl. It is a legit file, built to make form submissions from html to e-mail a breeze, but many of my customers have deleted the script as it, in default config, allows anyone to use it to parse spam through a server.

run this command to find it (other simple commands exist.. i know)

find / -name "FormMail*" -print

You can delete it or simply change the permissions on it so it can not be used.

For future reference, you can use the command

killall sendmail

That will kill sendmail without having to search for it.

04-03-2003, 07:53 PM	#1
pussyluver Clueless OleMan Join Date: Mar 2003 Location: ICQ - 169903487 Posts: 11,009	Need Plesk/Linux/smtp help - any pros around tonight I have a server with Plesk on a linux server. I need to turn off SMTP traffic until I can figure out what happened. I'm relaying traffic from a spammer. Yes relaying is closed. Plesk moved sendmail and uses qmail. just neet to shut down smtp till I can get plesk help in the morning. ./sendmail stop doesn't work - I've beat my head aginst google trying to find the right path and commands.. Any help appeciated. Thanks

04-03-2003, 07:55 PM	#2
NetRodent Confirmed User Join Date: Jan 2002 Location: In the walls of your house. Posts: 3,985	The command 'ps ax' will give you a nice printout of what's running on the system. Find the right process and kill it. __________________ "Every normal man must be tempted, at times, to spit on his hands, hoist the black flag, and begin slitting throats." --H.L. Mencken

04-03-2003, 10:40 PM	#6
Smegma Confirmed User Join Date: Feb 2002 Posts: 1,751	Just an FYI - Plesk has a built in sendmail backdoor through a file called FormMail.pl. It is a legit file, built to make form submissions from html to e-mail a breeze, but many of my customers have deleted the script as it, in default config, allows anyone to use it to parse spam through a server. run this command to find it (other simple commands exist.. i know) find / -name "FormMail*" -print You can delete it or simply change the permissions on it so it can not be used. For future reference, you can use the command killall sendmail That will kill sendmail without having to search for it. __________________ <a href="http://www.jupiterhosting.com"><img src="http://www.jupiterhosting.com/banners/55x55.jupiter.gif" alt="" border="0" align=""></a>

04-03-2003, 08:01 PM	#3
pussyluver Clueless OleMan Join Date: Mar 2003 Location: ICQ - 169903487 Posts: 11,009	thanks - a linux novice here! was so suppose to be doing galleries, not learning the OS.... managed support would help and cost.

04-03-2003, 08:14 PM	#4
pussyluver Clueless OleMan Join Date: Mar 2003 Location: ICQ - 169903487 Posts: 11,009	Thanks!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! was able find and kill the process!!!!!!!!!!!!!!

04-03-2003, 08:17 PM	#5
pussyluver Clueless OleMan Join Date: Mar 2003 Location: ICQ - 169903487 Posts: 11,009	NetRodent - You're the man!!!!!!