Hi all,
I would please ask for help on this situation: in Exim queue of undelivered messages I find, often, a long list of frozen messages sent by LFD (for hack attempt to htpasswd) to recipients like this ones:
Script@<MyLocalDomain>
Hack@<MyLocalDomain>
Attempts.@<MyLocalDomain>
-t@<MyLocalDomain>
with this return path
Return-path: <Automated@<MyLocalDomain>
The messages are frozen cause the previous mailbox are non existants on my server (this one hosting MyLocalDomain).
A typical string contained in this (frozen) messages are a thing like so:
[Wed Jul 29 12:42:08.337385 2015] [auth_basic:error] [pid 25413] [client <SOME_IP>:<SOME_PORT>] AH01618: user Admin not found:
How I can solve this problem? Where the previous mailboxes are read?
Thank you!
[Alert Mailboxes] Where they are registered?
-
- Junior Member
- Posts: 3
- Joined: 24 Feb 2014, 16:22
-
- Junior Member
- Posts: 3
- Joined: 24 Feb 2014, 16:22
Re: [Alert Mailboxes] Where they are registered?
Solved: during the customization of alert message I wriote the words "Automated" "Script" "Hack" "Attemps." that will be the "sender" and some recipients of the message itself.
Bye all!
Bye all!