Search results

I need help, please. I hove no idea how is hapening this spam from my IP. There is no data in mail log, MailerDaemon dosenot return email bounced I see now in SNDS of Hotmail more tan 5000 mails from my IP. This is the header of one email (I've got it in SNDS) (xx.xx.xx.xx is my IP)...

That is an empty message, error. I on't know how to delete. Sorry.

I've received a report from aol about a spam from my server, and by the same time my Ip appears in CBL. In the header of the message I read Return-Path: <verlenea@esutras.com> Received: from mydomain.com (mydomain.com [xxx.xxx.xxx.xxx]) by mtain-dd01.r1000.mx.aol.com (Internet Inbound)...

It looks like sesión hijack, but it uses always the about the same name for sesión file sin /tmp/ Now, I changed the sesssion.save_path in php.ini, every subdomains has its own tmp so I hope find the way it uses to enter the server. Regards

Mmm? I dont thnk so. You must know that *.domain.com is useful to create subdomains without having to set DNS for every subdomain. With this setting Horde Works fine. And the icon for webmail appears in mail config for the domain. But it doesnt wrok for Roundcube.

Thanks by info I found the solution: it was an issue with sesión folder. Thanks

I supposed so but it goes to the main page ot the domain (i have configured *.domain.com to main page) .... and the icons to webmail daesnt appear in control panel of user, like does with horde. Regards

Thank you. I suppose that when I set php.ini for main domain the change was propagated by others php.ini (subdoms and webmail), so /tmp/ as temporal was changed to /var/lib/php/session/ ... a litle headache fixed ;) Regards

I answer my own post, sorry. I suspected this was an issue with session, so I made a chmod 777 /var/lib/php/session and I can login webmail, but I don't know if it is a good idea. Is it a good solution? But my question is: Why until now horde was working without any problem? Why when...

Hi I can not login into webmail (Horde). It doesn' accpet the login/password, but i doesn't give any error message, simply return to the blank login form. Of course I'm sure I use the correct login/pass (it give no error). My first solution was reinstall it, but the problem goes on. Any...

Hi I can not login into webmail (Horde). It doesn' accpet the login/password, but i doesn't give any error message, simply return to the blank login form. Of course I'm sure I use the correct login/pass (it give no error). My first solution was reinstall it, but the problem goes on. My server...

I've installed Roundcube using update manager. All was fine, and the process ended with no errors. But where is the url to accesss the service? I cant see any icon to acces in mail accounts, like Horde. Thanks

Well: I catched the spam script I've a file named sess_f652da7dd28dce7baeeae54a46ae4092 in my tmp, and its a Perl script. I need to study it I see in my cron log a message about a failed cron by apache (I have Apache in cron.deny) , with the same time this file was created I've look in the...

Hello I google for the file name and i've found two sites related this file, well two hacked sites. In one of them the hacker sign "Mizos Hacker!!!" and the second "locus7Shell". you can see their "works" if search these names in google. They enter in sites with all permisions. Dangerous indeed...

Is there any other way? I obey the basic rule in computer science: if runs don't touch ;) My last upgrade of Plesk caused me some headache!! And by now ptoFTP is working Ok, the only problem is this long messages with no valuable info in my logwatch. Thanks

With the post you tell about and the post http://forum.parallels.com/showthread.php?290730-Spam-from-hole-in-Plesk&p=703987#post703987 I find a solution. It looks like a security hole in Plesk (?) Thanks

Perhaps this could be useful, or no. I killed /usr/bin/crond (2 process: one with a sh child and another with a perl as child), and maintain sendmail intercepted with a wrapper. And now I recevied this mail from my server, and look the date: when I created my first wrapped, it had an error and...

Hole secutiry in Plesk !! I have the same problem, I have seen all the facts you tell about: /var/www, sign mails previous the massive..... At this time I have sendmail intercepted woth the wrapper, modified so all the mail is sent to my mailbox, so I avoid outgoing spam, enter in a blackllist...

Well I've a lot of spam from my server, under Plesk 11.5, php 5.4 Reading head of mails I've found qmail 31475 invoked by uid 48 This 48 is the uid of Apache, so I suppose the script is owned by Apache, doesn't it? Then I added to php.ini 2 lines (new from php 5.3)...

To avoid dirty logwatch messages Because the message from logwatch is too dirty with this warning that tells me nothing useful, and because of that it's posible that I don't see important info. Thanks