sendmail – 服务器发送垃圾邮件？

我们有一些服务器为客户端托管网站和电子邮件帐户.

今天我们发现我们的一台服务器负载非常繁重,通过查看maillog,它发送了大量的服务器到奇怪的电子邮件地址.它看起来像是从我们的服务器发送垃圾邮件.但是,我找不到发送帐户是谁.

如何查找发件人,以便我可以关闭该帐户？

以下是队列中其中一个出站电子邮件的示例：

[root@server11 mqueue]# cat qfp96I9K1r020960
V8
T1317924562
K1318068176
N27
P3934747
I9/3/119387
MDeferred
Fws
$_localhost [127.0.0.1]
$rSMTP
$sUser
${daemon_flags}
${if_addr}127.0.0.1
S
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
MDeferred
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
rRFC822; [e-mail]
RPFD:
MDeferred
rRFC822; [e-mail]
RPFD:
H?P?Return-Path: 
H??Received: from User (localhost [127.0.0.1])
    by [server name] (8.13.1/8.13.1) with SMTP id p96I9K1r020960;
    Fri,7 Oct 2011 05:09:22 +1100
H?M?Message-Id: 
H??From: "Match.com"
H??Subject: Your Match Account Has Been Hold - Re-Connect Now
H??Date: Thu,6 Oct 2011 11:12:59 -0700
H??MIME-Version: 1.0
H??Content-Type: text/html;
    charset="Windows-1251"
H??Content-transfer-encoding: 7bit
H??X-Priority: 3
H??X-MSMail-Priority: normal
H??X-Mailer: Microsoft Outlook Express 6.00.2600.0000
H??X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

更新1：

一旦我清理了/ var / spool / mqueue文件夹,它就会很快填满新的垃圾邮件.
一旦我重新启动了sendmail服务,它就会停止填写垃圾邮件,但它会在几个小时后再回来.这表明了什么？谢谢.

解决方法

根据应用程序的设置方式,您可以通过检查服务器上的所有正在运行的进程来查看有问题的用户帐户,并查看哪些用户帐户占用了cpu.像这样的东西：

ps -eo pcpu,pid,user,args | sort -k 1 -r |头-10

希望它像一个滥用已知权限的用户空间进程一样简单,而不像需要被删除和重建的有根框的那样.准备好火焰喷射器.