Re: Internally generated spam - but from where?
- From: "Mac" <marcus@xxxxxxxxxxxxxxxxxxxxxxxx>
- Date: 5 Sep 2005 06:46:15 -0700
Ok, the plot thickens.
I have found the script that is responsible for this *, it is having
data posted to it so i cant see how they are actually breaking it but I
have done the following.
Protected the directory with a .htaccess file and added the IP of the
culprit to my iptables firewall.
So, i think i am protected from this spammer and i have prevented
anyone else finding the file untill i can find a suitable replacement.
(its instant web mail and a lot of my clients use it so i cant just
So, i have a new problem. I now have a single httpd process owned by
apache using up 99% of my CPU. How can i track down what is causing
this single process to use up so much CPU? I am just downloading,
installing and reading up on ethereal as Hristo kindly suggested. Will
this allow me to filter all http connections to see what is coming in
from where etc?
Any suggestions to help me track down what this process is doing and
who is causing it to do this?
Thanks again all, am learning some great stuff as i go!
Script causing the problems is instant web mail -
It is the latest version and everything so i suggest people avoid this
like the plague.
- Prev by Date: sendmail relay to email to sms addresses
- Next by Date: Re: Internally generated spam - but from where?
- Previous by thread: Re: Internally generated spam - but from where?
- Next by thread: Re: Internally generated spam - but from where?