New question...

[fobicodam]

My server has now, two main problems:

1.- I cant send emails to any uol's/sinectis's email servers.. i dont know if you know them, but here in SA they are so popular.. i guess they are from brazil...
every email i send to them is blocked with "too many messages from .." with my ip address. i ve install the postfix stats and my server is trying to send 40000 messages to each uol/sinectis domains.. very strange..

2.- I get a LOT of spam on every account on my server, doesnt matter wich domain. I tried to look them back to block ip address but a lot of them are originated by "localhost" :mad: how can i check/stop them??

Any help?

[till]

Either your server has been hacked or you have some PHP email scripts or cms systems on your server that are vulnerable for sending spam from outside. These scripts are in most cases formmail scripts.

[Ben]

Maybe you can try rkhunter for any rootkit existing on your server.