Postfix hit again (Spam)

[Les Mikesell]

On Tue, 2006-05-23 at 02:45, Paul Howarth wrote:

> I don't think that's what this is. Form spam takes advantage of
> poorly-coded mail/contact forms and uses them to send mail to recipients
> other than those intended by the form designer.
> 
> What's happening here is that the spammer is running their own code
> (downloaded into /tmp) to send the mail, a rather more serious
> situation.

If you have ssh access open there's a fair chance that someone
has done a brute-force password guess.  There is a lot of
that going around.  Or you didn't apply all of the current
updates before exposing the system to the internet.  

-- 
  Les Mikesell
   lesmikesell at gmail.com