need FreeBSD help - servers been hacked!
 

tech support @ my provider can't help at all.. i won't even go into how much i hate them.. what I do know is it's sending mass spam emails from somewhere that I can't locate so far.. im not sure what to do now, so any advice is appreciated. :helpme

ICQ: 63-149-919

if anyone is a web host and can help with this problem, i'll make the switch to your service next week. I'm still paid for 3 weeks with these people, but I'll switch next week if you can help

You're saying your machine is spamming and you don't know why?

Open 2 sessions:

netstat -w1

Monitors how much your server is sending.

netstat -an in another session... shows the network activety.

sockstat - shows ports opened by software.

It's probably related to a php script as FreeBSD is tight.

ICQ'd you

im hoping so.. i upgraded php from 4.3.6 to 4.3.11 and i HOPE that will help.. im not seeing anything being sent right now

hey hit me up icq 6981021 i might be able to help you out ab it

You need to rebuild the box, unless you just have an open relay. My guess would be an open port that they gained access or hacked the box and created a relay. In the future hire someone to lockdown your machine. Close all unnecessary ports, make sure all directories have the right permissions and only allow specific IP's to come in remote for admin.

Although anything (like exploits or a simple admin mistake) can leave you open, most hackers are looking for easy access (they have plenty of other choices) and will not spend time on a pretty secured box.

My two cents....

icq'd contact me