Detect if your mailserver is used as a spambot

From LQWiki
Jump to navigation Jump to search

To detect if your mail server is being used as a spambot, read this article.

Postfix

If you are using the postfix mta, you can detect if your server is used as a spambot:

  • send yourself a mail
  • see which log file contains the information about sent mail:
ls -ltr /var/log
you might see a file named mail.info. mail.info is used in this example.
  • read your log file and see if other people use your mail server to send mail:
cat /var/log/mail.info | grep relay=
  • verify that no bot has send mails from your computer:
cat /var/log/mail.info | grep -E "^.* .* .* .*: .*: to="