Recent Content by Alexcho

  1. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    It's not problem for reinstall. But is better to learn something. It was a great lesson for me and someone else, I hope. I have to reinstall it...
    Post by: Alexcho, Dec 31, 2021 in forum: General
  2. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    This ssl is from panel. I made new one and the error is gone! And i block port 25 outgoing connections also. Does UUCP user need SSH connection? I...
    Post by: Alexcho, Dec 31, 2021 in forum: General
  3. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    I deleted all sites earlier, so i haven't any site on this panel anymore. And i will edit all my posts with CODE. Thanks!
    Post by: Alexcho, Dec 31, 2021 in forum: General
  4. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    Client 2: 64.62.197.212 - - [29/Dec/2021:00:16:20 +0000] "GET / HTTP/1.1" 200 7730 "-" "-" 195.54.160.149 -...
    Post by: Alexcho, Dec 30, 2021 in forum: General
  5. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    But this document log have much more: /var/log/ispconfig/httpd/localhost.localdomain/20211229-access.log 78.83.89.173 - - [29/Dec/2021:20:45:11...
    Post by: Alexcho, Dec 30, 2021 in forum: General
  6. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    Ok i'm hacked! I tryed many things.. so much many, that my ispconfig is no more functional like before. My SMTP server is down, i can't connect it...
    Post by: Alexcho, Dec 30, 2021 in forum: General
  7. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    Ok for now i found solution but i don't know that is good solution. I didn't catched any smtp connections all night... I just remove...
    Post by: Alexcho, Dec 28, 2021 in forum: General
  8. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    Now i see the login client port is 48726... Every message is with diffrent port... I didn't open those porst... I'll check the router settings......
    Post by: Alexcho, Dec 27, 2021 in forum: General
  9. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    I make the rule! Only authenticated users stay in deffer... This spam pass the rule... I'll learn to fly from 4-th floor... :D PS:: Okey finaly...
    Post by: Alexcho, Dec 27, 2021 in forum: General
  10. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    Last auth.log Dec 27 17:45:04 panel sshd[309991]: error: connect_to 216.211.21.221 port 25: faile>Dec 27 17:45:08 panel sshd[309991]: error:...
    Post by: Alexcho, Dec 27, 2021 in forum: General
  11. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    I tryid to get ID of message but how? No mail in queue.... I reject port 25,465,587 from UFW and from panel and the messages from localhost...
    Post by: Alexcho, Dec 27, 2021 in forum: General
  12. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    yes i fix it this
    Post by: Alexcho, Dec 27, 2021 in forum: General
  13. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    I checked all files and didn't suspect anything. Next i scan with rkhunter and this is the log. alexcho@panel:~$ sudo cat /var/log/rkhunter.log |...
    Post by: Alexcho, Dec 27, 2021 in forum: General
  14. Alexcho
    Post

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    I examine 'mailq' and have 1 unsend mail. Next run the isppprotect for /var folder and found 61 malware ============================== Starting...
    Post by: Alexcho, Dec 27, 2021 in forum: General
  15. Alexcho
    Thread

    My mail send spam from localhost[127.0.0.1] client from helo=mega.nz

    Hello everyone and marry christmas! I wish you all the best! My mail server sending spam from client=localhost[127 0 0 1] with helo=mega nz Please...
    Thread by: Alexcho, Dec 27, 2021, 26 replies, in forum: General