You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-user@james.apache.org by "James Kearney(hotmail)" <ja...@hotmail.com> on 2003/11/06 16:05:12 UTC
Lots of unauthorized emails
Hi,
I am running the james server on jameskearney.com and I am getting lots of
emails saying "could not send email to xxx" where xxx is some address that I
have never heard of - so obviously someone unauthorized is using my server.
I have smtp auth set up - so I don't believe that it is the case that the
smtp server is an open relay.
I also have changed the passwords on the smtp accounts - this also does not
help.
The only possibility is that all of these messages were spooled in the short
time before I got smtp auth set up - is there anyway I can check what is
waiting to be sent, and remove it if it is not appropriate.
Failing this I am unsure as to how these nasty people are using my server to
send their junk!
Please help, I don't want to add to the spam problem!
thanks very much
james kearney
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: Lots of unauthorized emails
Posted by Steven Harris <st...@kenamea.com>.
There are websites you can use to determine if you are an open relay.
the one I used was ordb.org
It is also possible that you have a virus that is sending out e-mails or
even that someone else has a virus (you are in there address book) and
they are sending out e-mails as you. But do the open relay test first.
On Nov 6, 2003, at 9:22 AM, Vincenzo Gianferrari Pini wrote:
> James,
>
> yes, those are all messages waiting to be sent. Just delete all the
> files (better to stop James before doing that).
>
> Have a look at the date/time: are thy <= to the moment you did set up
> SMTPAuth? if yes, it is likely that you have been exploited as an open
> relay, otherwise it sounds something to investigate further.
>
> Ciao,
>
> Vincenzo
>
>> -----Original Message-----
>> From: James Kearney(hotmail) [mailto:jamesjohnkearney@hotmail.com]
>> Sent: giovedì 6 novembre 2003 16.43
>> To: James Users List
>> Subject: Re: Lots of unauthorized emails
>>
>>
>> Vincenzo,
>>
>> JAMES_ROOT/apps/james/var/mail/outgoing directory is full of
>> files, 8864 to
>> be exact.
>> Is this mail that is waiting to be sent, and can i just delete all the
>> files?
>> After doing this I will change the administrators account and all
>> users
>> account passwords again - hopefully this will stop the abuse.
>>
>> thanks v much
>>
>> james.
>>
>> ----- Original Message -----
>> From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
>> To: "James Users List" <se...@james.apache.org>
>> Sent: Thursday, November 06, 2003 3:24 PM
>> Subject: RE: Lots of unauthorized emails
>>
>>
>> Have a look at the
>> JAMES_ROOT/apps/james/var/mail/outgoing directory
>> if using file based repositories, or
>> select * from spool where repository_name='outgoing'
>> if using jdbc based repositories.
>>
>> Vincenzo
>>
>>> -----Original Message-----
>>> From: James Kearney(hotmail) [mailto:jamesjohnkearney@hotmail.com]
>>> Sent: giovedì 6 novembre 2003 16.05
>>> To: server-user@james.apache.org
>>> Subject: Lots of unauthorized emails
>>>
>>>
>>> Hi,
>>>
>>> I am running the james server on jameskearney.com and I am
>> getting lots of
>>> emails saying "could not send email to xxx" where xxx is some
>>> address that I
>>> have never heard of - so obviously someone unauthorized is using
>>> my server.
>>>
>>> I have smtp auth set up - so I don't believe that it is the
>> case that the
>>> smtp server is an open relay.
>>>
>>> I also have changed the passwords on the smtp accounts - this
>>> also does not
>>> help.
>>>
>>> The only possibility is that all of these messages were spooled
>>> in the short
>>> time before I got smtp auth set up - is there anyway I can check
>>> what is
>>> waiting to be sent, and remove it if it is not appropriate.
>>>
>>> Failing this I am unsure as to how these nasty people are using
>>> my server to
>>> send their junk!
>>>
>>> Please help, I don't want to add to the spam problem!
>>>
>>> thanks very much
>>>
>>> james kearney
>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
>>> For additional commands, e-mail: server-user-help@james.apache.org
>>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
>> For additional commands, e-mail: server-user-help@james.apache.org
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
>> For additional commands, e-mail: server-user-help@james.apache.org
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: Lots of unauthorized emails
Posted by "James Kearney(hotmail)" <ja...@hotmail.com>.
thanks for the advice steve,
I have scheduled the ordb test, but I am confident that this is not the
problem, as I have checked the smtp server using telnet and the Auth is
working fine.
I did disable the RemoteAddrNotInNetwork, but I am sure that these mails are
coming from an outside source using the smtp server. I have ip addresses of
connections coming from outside my network, and error messages about emails
that I sent, and lots of emails in the mail/outgoing directory that I have
not sent (these have now been removed).
I have also changed the password for remote config, and the passwords on the
user accounts... Hopefully this will remedy the situation - if not I am not
sure what else I will do - but I will just have to wait and see.
thanks for the help - much appreciated,
james
----- Original Message -----
From: "steve" <st...@browsermedia.com>
To: "James Users List" <se...@james.apache.org>
Sent: Thursday, November 06, 2003 6:58 PM
Subject: Re: Lots of unauthorized emails
> Did you disable the RemoteAddrNotInNetwork entry in
> the config.xml when you setup SMTP-auth? I ran into a trouble once
> when my firewall made all email look like it was coming from an
> internal connection (namely, the firewall's ip address).
>
> That was quite a while ago, but I think that is right.
>
> I also recommend the relay test suggesten by Steven Harris; just be
> aware that if you fail, your address will be listed by ordb.org as an
> open relay until you correct the issue and have them re-test.
>
> Steve B.
>
> ----- Original Message -----
> From: "James Kearney(hotmail)" <ja...@hotmail.com>
> To: "James Users List" <se...@james.apache.org>
> Sent: Thursday, November 06, 2003 12:30 PM
> Subject: Re: Lots of unauthorized emails
>
>
> Vincenzo,
>
> thanks for all the help. I will delete those messages.
>
> Unfortunately, quite a lot have a date that is after I set up SMTPAuth...
so
> not quite sure what to do about that.
> I have telneted to the smtp server, and smtp auth seems to be working
ok...
>
> I will change the passwords of my accounts (only have three passwords, the
> admin password, my password, and postmaster password).
>
> Hopefully changing the passwords might stop it - but I suspect that this
> isn't the problem.
>
> james
>
> ----- Original Message -----
> From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
> To: "James Users List" <se...@james.apache.org>
> Sent: Thursday, November 06, 2003 5:22 PM
> Subject: RE: Lots of unauthorized emails
>
>
> James,
>
> yes, those are all messages waiting to be sent. Just delete all the files
> (better to stop James before doing that).
>
> Have a look at the date/time: are thy <= to the moment you did set up
> SMTPAuth? if yes, it is likely that you have been exploited as an open
> relay, otherwise it sounds something to investigate further.
>
> Ciao,
>
> Vincenzo
>
> > -----Original Message-----
> > From: James Kearney(hotmail) [mailto:jamesjohnkearney@hotmail.com]
> > Sent: giovedì 6 novembre 2003 16.43
> > To: James Users List
> > Subject: Re: Lots of unauthorized emails
> >
> >
> > Vincenzo,
> >
> > JAMES_ROOT/apps/james/var/mail/outgoing directory is full of
> > files, 8864 to
> > be exact.
> > Is this mail that is waiting to be sent, and can i just delete all the
> > files?
> > After doing this I will change the administrators account and all users
> > account passwords again - hopefully this will stop the abuse.
> >
> > thanks v much
> >
> > james.
> >
> > ----- Original Message -----
> > From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
> > To: "James Users List" <se...@james.apache.org>
> > Sent: Thursday, November 06, 2003 3:24 PM
> > Subject: RE: Lots of unauthorized emails
> >
> >
> > Have a look at the
> > JAMES_ROOT/apps/james/var/mail/outgoing directory
> > if using file based repositories, or
> > select * from spool where repository_name='outgoing'
> > if using jdbc based repositories.
> >
> > Vincenzo
> >
> > > -----Original Message-----
> > > From: James Kearney(hotmail) [mailto:jamesjohnkearney@hotmail.com]
> > > Sent: giovedì 6 novembre 2003 16.05
> > > To: server-user@james.apache.org
> > > Subject: Lots of unauthorized emails
> > >
> > >
> > > Hi,
> > >
> > > I am running the james server on jameskearney.com and I am
> > getting lots of
> > > emails saying "could not send email to xxx" where xxx is some
> > > address that I
> > > have never heard of - so obviously someone unauthorized is using
> > > my server.
> > >
> > > I have smtp auth set up - so I don't believe that it is the
> > case that the
> > > smtp server is an open relay.
> > >
> > > I also have changed the passwords on the smtp accounts - this
> > > also does not
> > > help.
> > >
> > > The only possibility is that all of these messages were spooled
> > > in the short
> > > time before I got smtp auth set up - is there anyway I can check what
is
> > > waiting to be sent, and remove it if it is not appropriate.
> > >
> > > Failing this I am unsure as to how these nasty people are using
> > > my server to
> > > send their junk!
> > >
> > > Please help, I don't want to add to the spam problem!
> > >
> > > thanks very much
> > >
> > > james kearney
> > >
> > >
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> > > For additional commands, e-mail: server-user-help@james.apache.org
> > >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> > For additional commands, e-mail: server-user-help@james.apache.org
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> > For additional commands, e-mail: server-user-help@james.apache.org
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: Lots of unauthorized emails
Posted by steve <st...@browsermedia.com>.
Did you disable the RemoteAddrNotInNetwork entry in
the config.xml when you setup SMTP-auth? I ran into a trouble once
when my firewall made all email look like it was coming from an
internal connection (namely, the firewall's ip address).
That was quite a while ago, but I think that is right.
I also recommend the relay test suggesten by Steven Harris; just be
aware that if you fail, your address will be listed by ordb.org as an
open relay until you correct the issue and have them re-test.
Steve B.
----- Original Message -----
From: "James Kearney(hotmail)" <ja...@hotmail.com>
To: "James Users List" <se...@james.apache.org>
Sent: Thursday, November 06, 2003 12:30 PM
Subject: Re: Lots of unauthorized emails
Vincenzo,
thanks for all the help. I will delete those messages.
Unfortunately, quite a lot have a date that is after I set up SMTPAuth... so
not quite sure what to do about that.
I have telneted to the smtp server, and smtp auth seems to be working ok...
I will change the passwords of my accounts (only have three passwords, the
admin password, my password, and postmaster password).
Hopefully changing the passwords might stop it - but I suspect that this
isn't the problem.
james
----- Original Message -----
From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
To: "James Users List" <se...@james.apache.org>
Sent: Thursday, November 06, 2003 5:22 PM
Subject: RE: Lots of unauthorized emails
James,
yes, those are all messages waiting to be sent. Just delete all the files
(better to stop James before doing that).
Have a look at the date/time: are thy <= to the moment you did set up
SMTPAuth? if yes, it is likely that you have been exploited as an open
relay, otherwise it sounds something to investigate further.
Ciao,
Vincenzo
> -----Original Message-----
> From: James Kearney(hotmail) [mailto:jamesjohnkearney@hotmail.com]
> Sent: giovedì 6 novembre 2003 16.43
> To: James Users List
> Subject: Re: Lots of unauthorized emails
>
>
> Vincenzo,
>
> JAMES_ROOT/apps/james/var/mail/outgoing directory is full of
> files, 8864 to
> be exact.
> Is this mail that is waiting to be sent, and can i just delete all the
> files?
> After doing this I will change the administrators account and all users
> account passwords again - hopefully this will stop the abuse.
>
> thanks v much
>
> james.
>
> ----- Original Message -----
> From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
> To: "James Users List" <se...@james.apache.org>
> Sent: Thursday, November 06, 2003 3:24 PM
> Subject: RE: Lots of unauthorized emails
>
>
> Have a look at the
> JAMES_ROOT/apps/james/var/mail/outgoing directory
> if using file based repositories, or
> select * from spool where repository_name='outgoing'
> if using jdbc based repositories.
>
> Vincenzo
>
> > -----Original Message-----
> > From: James Kearney(hotmail) [mailto:jamesjohnkearney@hotmail.com]
> > Sent: giovedì 6 novembre 2003 16.05
> > To: server-user@james.apache.org
> > Subject: Lots of unauthorized emails
> >
> >
> > Hi,
> >
> > I am running the james server on jameskearney.com and I am
> getting lots of
> > emails saying "could not send email to xxx" where xxx is some
> > address that I
> > have never heard of - so obviously someone unauthorized is using
> > my server.
> >
> > I have smtp auth set up - so I don't believe that it is the
> case that the
> > smtp server is an open relay.
> >
> > I also have changed the passwords on the smtp accounts - this
> > also does not
> > help.
> >
> > The only possibility is that all of these messages were spooled
> > in the short
> > time before I got smtp auth set up - is there anyway I can check what is
> > waiting to be sent, and remove it if it is not appropriate.
> >
> > Failing this I am unsure as to how these nasty people are using
> > my server to
> > send their junk!
> >
> > Please help, I don't want to add to the spam problem!
> >
> > thanks very much
> >
> > james kearney
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> > For additional commands, e-mail: server-user-help@james.apache.org
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: Lots of unauthorized emails
Posted by "James Kearney(hotmail)" <ja...@hotmail.com>.
Vincenzo,
thanks for all the help. I will delete those messages.
Unfortunately, quite a lot have a date that is after I set up SMTPAuth... so
not quite sure what to do about that.
I have telneted to the smtp server, and smtp auth seems to be working ok...
I will change the passwords of my accounts (only have three passwords, the
admin password, my password, and postmaster password).
Hopefully changing the passwords might stop it - but I suspect that this
isn't the problem.
james
----- Original Message -----
From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
To: "James Users List" <se...@james.apache.org>
Sent: Thursday, November 06, 2003 5:22 PM
Subject: RE: Lots of unauthorized emails
James,
yes, those are all messages waiting to be sent. Just delete all the files
(better to stop James before doing that).
Have a look at the date/time: are thy <= to the moment you did set up
SMTPAuth? if yes, it is likely that you have been exploited as an open
relay, otherwise it sounds something to investigate further.
Ciao,
Vincenzo
> -----Original Message-----
> From: James Kearney(hotmail) [mailto:jamesjohnkearney@hotmail.com]
> Sent: giovedì 6 novembre 2003 16.43
> To: James Users List
> Subject: Re: Lots of unauthorized emails
>
>
> Vincenzo,
>
> JAMES_ROOT/apps/james/var/mail/outgoing directory is full of
> files, 8864 to
> be exact.
> Is this mail that is waiting to be sent, and can i just delete all the
> files?
> After doing this I will change the administrators account and all users
> account passwords again - hopefully this will stop the abuse.
>
> thanks v much
>
> james.
>
> ----- Original Message -----
> From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
> To: "James Users List" <se...@james.apache.org>
> Sent: Thursday, November 06, 2003 3:24 PM
> Subject: RE: Lots of unauthorized emails
>
>
> Have a look at the
> JAMES_ROOT/apps/james/var/mail/outgoing directory
> if using file based repositories, or
> select * from spool where repository_name='outgoing'
> if using jdbc based repositories.
>
> Vincenzo
>
> > -----Original Message-----
> > From: James Kearney(hotmail) [mailto:jamesjohnkearney@hotmail.com]
> > Sent: giovedì 6 novembre 2003 16.05
> > To: server-user@james.apache.org
> > Subject: Lots of unauthorized emails
> >
> >
> > Hi,
> >
> > I am running the james server on jameskearney.com and I am
> getting lots of
> > emails saying "could not send email to xxx" where xxx is some
> > address that I
> > have never heard of - so obviously someone unauthorized is using
> > my server.
> >
> > I have smtp auth set up - so I don't believe that it is the
> case that the
> > smtp server is an open relay.
> >
> > I also have changed the passwords on the smtp accounts - this
> > also does not
> > help.
> >
> > The only possibility is that all of these messages were spooled
> > in the short
> > time before I got smtp auth set up - is there anyway I can check what is
> > waiting to be sent, and remove it if it is not appropriate.
> >
> > Failing this I am unsure as to how these nasty people are using
> > my server to
> > send their junk!
> >
> > Please help, I don't want to add to the spam problem!
> >
> > thanks very much
> >
> > james kearney
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> > For additional commands, e-mail: server-user-help@james.apache.org
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
RE: Lots of unauthorized emails
Posted by Vincenzo Gianferrari Pini <vi...@praxis.it>.
James,
yes, those are all messages waiting to be sent. Just delete all the files (better to stop James before doing that).
Have a look at the date/time: are thy <= to the moment you did set up SMTPAuth? if yes, it is likely that you have been exploited as an open relay, otherwise it sounds something to investigate further.
Ciao,
Vincenzo
> -----Original Message-----
> From: James Kearney(hotmail) [mailto:jamesjohnkearney@hotmail.com]
> Sent: giovedì 6 novembre 2003 16.43
> To: James Users List
> Subject: Re: Lots of unauthorized emails
>
>
> Vincenzo,
>
> JAMES_ROOT/apps/james/var/mail/outgoing directory is full of
> files, 8864 to
> be exact.
> Is this mail that is waiting to be sent, and can i just delete all the
> files?
> After doing this I will change the administrators account and all users
> account passwords again - hopefully this will stop the abuse.
>
> thanks v much
>
> james.
>
> ----- Original Message -----
> From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
> To: "James Users List" <se...@james.apache.org>
> Sent: Thursday, November 06, 2003 3:24 PM
> Subject: RE: Lots of unauthorized emails
>
>
> Have a look at the
> JAMES_ROOT/apps/james/var/mail/outgoing directory
> if using file based repositories, or
> select * from spool where repository_name='outgoing'
> if using jdbc based repositories.
>
> Vincenzo
>
> > -----Original Message-----
> > From: James Kearney(hotmail) [mailto:jamesjohnkearney@hotmail.com]
> > Sent: giovedì 6 novembre 2003 16.05
> > To: server-user@james.apache.org
> > Subject: Lots of unauthorized emails
> >
> >
> > Hi,
> >
> > I am running the james server on jameskearney.com and I am
> getting lots of
> > emails saying "could not send email to xxx" where xxx is some
> > address that I
> > have never heard of - so obviously someone unauthorized is using
> > my server.
> >
> > I have smtp auth set up - so I don't believe that it is the
> case that the
> > smtp server is an open relay.
> >
> > I also have changed the passwords on the smtp accounts - this
> > also does not
> > help.
> >
> > The only possibility is that all of these messages were spooled
> > in the short
> > time before I got smtp auth set up - is there anyway I can check what is
> > waiting to be sent, and remove it if it is not appropriate.
> >
> > Failing this I am unsure as to how these nasty people are using
> > my server to
> > send their junk!
> >
> > Please help, I don't want to add to the spam problem!
> >
> > thanks very much
> >
> > james kearney
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> > For additional commands, e-mail: server-user-help@james.apache.org
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: Lots of unauthorized emails
Posted by "James Kearney(hotmail)" <ja...@hotmail.com>.
Vincenzo,
JAMES_ROOT/apps/james/var/mail/outgoing directory is full of files, 8864 to
be exact.
Is this mail that is waiting to be sent, and can i just delete all the
files?
After doing this I will change the administrators account and all users
account passwords again - hopefully this will stop the abuse.
thanks v much
james.
----- Original Message -----
From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
To: "James Users List" <se...@james.apache.org>
Sent: Thursday, November 06, 2003 3:24 PM
Subject: RE: Lots of unauthorized emails
Have a look at the
JAMES_ROOT/apps/james/var/mail/outgoing directory
if using file based repositories, or
select * from spool where repository_name='outgoing'
if using jdbc based repositories.
Vincenzo
> -----Original Message-----
> From: James Kearney(hotmail) [mailto:jamesjohnkearney@hotmail.com]
> Sent: giovedì 6 novembre 2003 16.05
> To: server-user@james.apache.org
> Subject: Lots of unauthorized emails
>
>
> Hi,
>
> I am running the james server on jameskearney.com and I am getting lots of
> emails saying "could not send email to xxx" where xxx is some
> address that I
> have never heard of - so obviously someone unauthorized is using
> my server.
>
> I have smtp auth set up - so I don't believe that it is the case that the
> smtp server is an open relay.
>
> I also have changed the passwords on the smtp accounts - this
> also does not
> help.
>
> The only possibility is that all of these messages were spooled
> in the short
> time before I got smtp auth set up - is there anyway I can check what is
> waiting to be sent, and remove it if it is not appropriate.
>
> Failing this I am unsure as to how these nasty people are using
> my server to
> send their junk!
>
> Please help, I don't want to add to the spam problem!
>
> thanks very much
>
> james kearney
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
RE: Lots of unauthorized emails
Posted by Vincenzo Gianferrari Pini <vi...@praxis.it>.
Have a look at the
JAMES_ROOT/apps/james/var/mail/outgoing directory
if using file based repositories, or
select * from spool where repository_name='outgoing'
if using jdbc based repositories.
Vincenzo
> -----Original Message-----
> From: James Kearney(hotmail) [mailto:jamesjohnkearney@hotmail.com]
> Sent: giovedì 6 novembre 2003 16.05
> To: server-user@james.apache.org
> Subject: Lots of unauthorized emails
>
>
> Hi,
>
> I am running the james server on jameskearney.com and I am getting lots of
> emails saying "could not send email to xxx" where xxx is some
> address that I
> have never heard of - so obviously someone unauthorized is using
> my server.
>
> I have smtp auth set up - so I don't believe that it is the case that the
> smtp server is an open relay.
>
> I also have changed the passwords on the smtp accounts - this
> also does not
> help.
>
> The only possibility is that all of these messages were spooled
> in the short
> time before I got smtp auth set up - is there anyway I can check what is
> waiting to be sent, and remove it if it is not appropriate.
>
> Failing this I am unsure as to how these nasty people are using
> my server to
> send their junk!
>
> Please help, I don't want to add to the spam problem!
>
> thanks very much
>
> james kearney
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org