|
xxxomxxx -> messages in queues (25.Sep.2006 12:00:14 PM)
|
hi
I am getting approx 4-9 queues with 10-30 messages that come from administrator@ourdomain.ch to deliver a NDR
i looked up the messages and the body contains a mesage within a message.. the sender i am tracing it to is
dmifj@media.pl aka Fish
or @magentaprodotti13.com
mostly different are contents:
Message Name: Frog
Content:bogus
Attachment:CrewWord.gif
it seems to be a kind of worm. We are actually protected well, do not show up on any relay list or anything, and i dont think any messages are sent through the server that shouldnt be...
is this normal to have queues like this? Funny thing is, we have GFI & SAV on the server, so worms and alike should show up and give a message to the admin, but these seem to originate form the system itselves or a spammer that is hijacking our system...
if messages really are sent through our server, i am unlikely to catch them, since the queues would empty themselves quickly enough to show up empty
how can i monitor these events..
|
|
|
|