hello community, on my old ispconfig 2 Server i have migrated much infected files (maleware) to the new ispconfig 3 install. i run Debian squeeze. i let run a full malted scan (much files are be infected). i have cleaned this files. but now, the main Problem: my server is spamming... BUT: i have deactivated email Server on ispconfig and have manually stopped postfix, amavised (courier)... but i see, i get each 2-3 days on a new blacklist. what i should do? the mail() function is disabled on each web. the Services (mailserver) all is stopped. now how i can only allow Connections to another Server (with port25 to send emails like phpmailer) and close the mainproblem port, that Spams over my Server? how works that? i dont know... since i have activated the exec function (for imagemagick) for 6 Domains, the Servers is spamming.. any infos for me? maybe iptables? i only will allow manually Connections to e.g. mail.test.com and mail.test2.com... can you help me? do you have ane ideas HOW the Server can Spams?? this Server is only webserver. mailserver ist an extra Server. thanks! many greets
How do you knwo that your server is sending the spam? Just appearing on blacklists does not mean you are spamming.
hello, 1. postfixqueue is filling (but the Service is stopped) 2. on day 1 i was on 1 blacklist. und day 3 i was on 7 blacklists (i get a abuse mail) ... i dont know ;(
What Horfic suggested is the most lkely reason. Please see here on how to find which site is causing the issue: http://www.howtoforge.com/forums/showthread.php?t=63342&highlight=postcat
