Hi,<br><br>since friday our server has been exploited as a relay for several domains who are spammers<br>we have Solar speed ver 5 installed and up to date but seems that the exp´liot can't be detected<br><br>Here is some logs<br>
<br><pre>Jun 7 16:23:14 ns1 sendmail[23694]: o57LMj4U023694: from=<<a href="mailto:tbent@wanadoo.co.uk">tbent@wanadoo.co.uk</a>>, size=1509, class=0, nrcpts=50, msgid=<<a href="mailto:201006072122.o57LMj4U023694@ns1.abaco.net.mx">201006072122.o57LMj4U023694@ns1.abaco.net.mx</a>>, proto=ESMTP, daemon=MTA, relay=<a href="http://adsl1888.4u.com.gh">adsl1888.4u.com.gh</a> [41.210.18.88]<br>
Jun 7 16:23:14 ns1 sendmail[23694]: o57LMj4U023694: Milter add: header: X-Virus-Scanned: clamav-milter 0.96.1 at <a href="http://ns1.abaco.net.mx">ns1.abaco.net.mx</a><br>Jun 7 16:23:14 ns1 sendmail[23694]: o57LMj4U023694: Milter add: header: X-Virus-Status: Clean<br>
Jun 7 16:23:14 ns1 sendmail[23733]: o57LNBb5023733: lost input channel from [188.48.168.35] to MTA after rcpt<br>Jun 7 16:23:14 ns1 sendmail[23733]: o57LNBb5023733: from=<<a href="mailto:confluentBq@justnet.org">confluentBq@justnet.org</a>>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[188.48.168.35]<br>
Jun 7 16:23:15 ns1 sendmail[23674]: o57LLwBd023608: to=<<a href="mailto:frederick.stone@snet.net">frederick.stone@snet.net</a>>, delay=00:01:12, xdelay=00:00:06, mailer=esmtp, pri=1591509, relay=<a href="http://snetmx9.prodigy.net">snetmx9.prodigy.net</a>. [207.115.36.22], dsn=2.0.0, stat=Sent (o57MgVYP021714 Message accepted for delivery)<br>
Jun 7 16:23:15 ns1 sendmail[23755]: o57LMj4U023694: to=<<a href="mailto:fumble30@aol.com">fumble30@aol.com</a>>, delay=00:00:26, xdelay=00:00:01, mailer=esmtp, pri=1591509, relay=<a href="http://mailin-02.mx.aol.com">mailin-02.mx.aol.com</a>. [205.188.155.110], dsn=5.1.1, stat=User unknown<br>
Jun 7 16:23:15 ns1 sendmail[23755]: o57LMj4U023694: to=<<a href="mailto:fulte@aol.com">fulte@aol.com</a>>, delay=00:00:26, xdelay=00:00:01, mailer=esmtp, pri=1591509, relay=<a href="http://mailin-02.mx.aol.com">mailin-02.mx.aol.com</a>. [205.188.155.110], dsn=5.1.1, stat=User unknown<br>
Jun 7 16:23:15 ns1 sendmail[23755]: o57LMj4U023694: to=<<a href="mailto:fuls8@aol.com">fuls8@aol.com</a>>, delay=00:00:26, xdelay=00:00:01, mailer=esmtp, pri=1591509, relay=<a href="http://mailin-02.mx.aol.com">mailin-02.mx.aol.com</a>. [205.188.155.110], dsn=5.1.1, stat=User unknown<br>
Jun 7 16:23:16 ns1 sendmail[23674]: o57LLwBd023608: to=<<a href="mailto:frederick.louie@sun.com">frederick.louie@sun.com</a>>, delay=00:01:13, xdelay=00:00:01, mailer=esmtp, pri=1591509, relay=<a href="http://btmx4.sun.com">btmx4.sun.com</a>. [192.5.209.6], dsn=2.0.0, stat=Sent (Message received and queued)<br>
Jun 7 16:23:16 ns1 sendmail[23755]: o57LMj4U023694: to=<<a href="mailto:fultonmr@aol.com">fultonmr@aol.com</a>>,<<a href="mailto:fultimeslackervb@aol.com">fultimeslackervb@aol.com</a>>,<<a href="mailto:fulmoon19@aol.com">fulmoon19@aol.com</a>>,<<a href="mailto:fulltipz@aol.com">fulltipz@aol.com</a>>, delay=00:00:27, xdelay=00:00:02, mailer=esmtp, pri=1591509, relay=<a href="http://mailin-02.mx.aol.com">mailin-02.mx.aol.com</a>. [205.188.155.110], dsn=2.0.0, stat=Sent (2.0.0 Ok: queued as 3EC3F38000CAD)<br>
<br></pre>Any suggestion will be apreciate.<br><br>thanks in advance<br>