Tycoon Talk
Become a Big fish!
The number 1 forum for online business!
Post topics, ask questions, share your knowledge.
Tycoon Talk is part of Freelancer.com - find skilled workers online at a fraction of the cost.

Website and Server Administration Forum


You are currently viewing our Website and Server Administration Forum as a guest. Please register to participate.
Login



Reply
need help for qmail, somebody tried to get passwords?
Old 05-03-2010, 03:22 AM need help for qmail, somebody tried to get passwords?
Junior Talker

Posts: 4
Name: Darko
Location: Croatia
Trades: 0
Hopefully somenone can help in this matter. I've just started with VPS webserver administration and I don't have much experience with mail programs.

I received the following mail on my postmaster account:

Return-Path: <>
Received: (qmail 11279 invoked for bounce); 1 May 2010 05:00:03 +0200
Date: 1 May 2010 05:00:03 +0200
From: MAILER-DAEMON@xx-xx-xx.webhostprovider.com
To: anonymous@hostname.myhost.com
Subject: failure notice

Hi. This is the qmail-send program at xx-xx-xx.webhostprovider.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<list@hostname.myhost.com>:
Sorry, I couldn't find any host named hostname.myhost.com. (#5.1.2)

--- Below this line is a copy of the message.

Return-Path: <anonymous@hostname.myhost.com>
Received: (qmail 1961 invoked by uid 38); 1 May 2010 05:00:01 +0200
Date: 1 May 2010 05:00:01 +0200
Message-ID: <20100501030001.1569.qmail@hostname.myhost.com>
From: root@hostname.myhost.com (Cron Daemon)
To: list@hostname.myhost.com
Subject: Cron <list@hostname> [ -x /usr/lib/mailman/cron/mailpasswds ] && /usr/lib/mailman/cron/mailpasswds
Content-Type: text/plain; charset=ANSI_X3.4-1968
X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <HOME=/var/list>
X-Cron-Env: <PATH=/usr/bin:/bin>
X-Cron-Env: <LOGNAME=list>

Site list is missing: mailman


It seems to me like somebody tried to get account passwords. I did not work on server for sometime.
I changed domain names in this message, prefixes are as in original message.
"hostname.myhost.com" is internal server name, not available in DNS.

Somebody have any idea what happened? Perhaps this is automatic message from mailman? I don't use mailman, it has been automatically installed

Last edited by Danxy; 05-03-2010 at 03:53 AM..
Danxy is offline
Reply With Quote
View Public Profile
 
 
Register now for full access!
Old 05-03-2010, 04:23 AM Re: need help for qmail, somebody tried to get passwords?
Extreme Talker

Posts: 167
Name: Jilesh
Trades: 0
According to the email, the email send automatically by the server. Please make sure that you have not set any cron to send email.
__________________

Please login or register to view this content. Registration is FREE

ASP.NET 3.5 | SQL 2005 Database | US Based Hosting Company | 24 X 7 Support | Daily Backups
|
Please login or register to view this content. Registration is FREE
|
Please login or register to view this content. Registration is FREE
|
Please login or register to view this content. Registration is FREE
thewebhostingdi is offline
Reply With Quote
View Public Profile
 
Old 05-03-2010, 04:37 AM Re: need help for qmail, somebody tried to get passwords?
lynxus's Avatar
Awesomeo-Maximo

Posts: 1,618
Location: UK
Trades: 1
Yeah id check your crontab and check this file.
/usr/lib/mailman/cron/mailpasswds

And Tbh if you dont use it, Rename the files to something like.

user@blaa# mv
/usr/lib/mailman/cron/mailpasswds /usr/lib/mailman/cron/mailpasswds.OLD


__________________

Please login or register to view this content. Registration is FREE

Please login or register to view this content. Registration is FREE


Please login or register to view this content. Registration is FREE

Please login or register to view this content. Registration is FREE


lynxus is offline
Reply With Quote
View Public Profile Visit lynxus's homepage!
 
Old 05-03-2010, 04:56 AM Re: need help for qmail, somebody tried to get passwords?
Skilled Talker

Posts: 84
Name: Jonthy
Trades: 0
I think the mail came because the account of the person has removed from the server to whom you wanted to send the mail.
__________________

Please login or register to view this content. Registration is FREE
itandseoservice is offline
Reply With Quote
View Public Profile
 
Old 05-03-2010, 05:04 AM Re: need help for qmail, somebody tried to get passwords?
Junior Talker

Posts: 4
Name: Darko
Location: Croatia
Trades: 0
Thanks guys.
I was not sure what was going on because I did not setup any cron jobs. Cron job is probably automatically configured during server setup. I renamed mailpasswds and need to check other cron jobs because actually I don't see crontab entry for such job (in mailman cron directory).

Last edited by Danxy; 05-03-2010 at 05:13 AM..
Danxy is offline
Reply With Quote
View Public Profile
 
Old 05-03-2010, 05:44 AM Re: need help for qmail, somebody tried to get passwords?
chrishirst's Avatar
Missing! presumed drunk.

Posts: 42,390
Name: Chris Hirst
Location: Blackpool. UK
Trades: 0
Quote:
because I did not setup any cron jobs.
Probably not. BUT have you been trying to setup mailman? (It's a mailing list tool that comes bundled with most cPanel installs)
__________________
Chris. ->>
Please login or register to view this content. Registration is FREE
<<-

A foolish consistency is the hobgoblin of little minds
Thought for today:- Is SEO the only industry where all the cowboys are Indians?
chrishirst is online now
Reply With Quote
View Public Profile Visit chrishirst's homepage!
 
Old 05-03-2010, 07:07 AM Re: need help for qmail, somebody tried to get passwords?
Junior Talker

Posts: 4
Name: Darko
Location: Croatia
Trades: 0
Quote:
Originally Posted by chrishirst View Post
Probably not. BUT have you been trying to setup mailman? (It's a mailing list tool that comes bundled with most cPanel installs)
NO, I did not tried to setup mailman. I am using Parallels cpanel, and I found out that mailman was initially installed.

Last edited by Danxy; 05-03-2010 at 07:09 AM..
Danxy is offline
Reply With Quote
View Public Profile
 
Old 05-03-2010, 07:26 AM Re: need help for qmail, somebody tried to get passwords?
chrishirst's Avatar
Missing! presumed drunk.

Posts: 42,390
Name: Chris Hirst
Location: Blackpool. UK
Trades: 0
Quote:
Parallels cpanel
So it's Plesk then NOT cPanel?
__________________
Chris. ->>
Please login or register to view this content. Registration is FREE
<<-

A foolish consistency is the hobgoblin of little minds
Thought for today:- Is SEO the only industry where all the cowboys are Indians?
chrishirst is online now
Reply With Quote
View Public Profile Visit chrishirst's homepage!
 
Old 05-04-2010, 03:43 AM Re: need help for qmail, somebody tried to get passwords?
Junior Talker

Posts: 4
Name: Darko
Location: Croatia
Trades: 0
Quote:
Originally Posted by chrishirst View Post
So it's Plesk then NOT cPanel?
Yes, Plesk.
Danxy is offline
Reply With Quote
View Public Profile
 
Reply     « Reply to need help for qmail, somebody tried to get passwords?
 

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off





   
RSS Feed  Feeds: RSS   JS   XML
RSS Feed  Feeds for this forum: RSS   JS   XML



Page generated in 0.29872 seconds with 12 queries