Have I Been Hacked? :-o

Discussion in 'Server Operation' started by PierreQuebec, Apr 5, 2008.

  1. PierreQuebec

    PierreQuebec New Member

    Now I'm wondering if I have been hacked or something!!! :-S

    I tried again setting up my MX records to my current IP address, and then I sent myself an e-mail from my Hotmail account. It bounced back with the following message:

    Now http://www.amadis.com returns nothing (hangs) and http://www.ctmail.com shows an "Under Construction" page, so I can't get much info about those.

    Have I been somehow hacked? Their IP address ( is nothing like mine (currently or the one returned by:
  2. topdog

    topdog New Member HowtoForge Supporter

    your mx is pointing else where.
  3. PierreQuebec

    PierreQuebec New Member

    I've changed the MX records now and everything should work, but it's not working still, Postfix won't get the messages for the domains it's watching.

    As I posted in another thread, it all started after my Internet connexion was down for a few hours. Could it be that my ISP decided to block the ports used by Postfix? How could I check that out?
  4. chipsafts

    chipsafts New Member

    no response from
    and traceroute dies at bx1-chicagodt_pos1-1.net.bell.ca
  5. PierreQuebec

    PierreQuebec New Member

    Thanks. What port were you scanning? I'll try and figure out what is happenning...
  6. chipsafts

    chipsafts New Member

    I tried sending an email to the account you mentioned and got the 'no response'. I don't know what traceroute uses, I presume the same as ping.
  7. PierreQuebec

    PierreQuebec New Member

    Odd. Everything used to work just fine. Maybe I should try deinstalling and reinstalling Postfix?!

    I'm puzzled!
  8. chipsafts

    chipsafts New Member

    if you can send internally on that pc, then check your firewall.
    I can't answer your Postfix questions as I'm a sendmail 'er.
  9. PierreQuebec

    PierreQuebec New Member

    Well I meant that it was working fine before I had problems with my Internet connexion.

    Is it possible to configure Sendmail to handle multiple domains? I chose Postfix because I ran across a "howto" but if I have other choices, I'll consider them...
  10. falko

    falko Super Moderator ISPConfig Developer

    Yes, but I find Sendmail hard to configure. I'd stay with Postfix.
    What's the output of
    iptables -L
    ? Is port 25 open in your router's firewall?
  11. badgerbox76

    badgerbox76 New Member

    I know I was recently hacked. I installed sendmail without configuring it immediately. Someone from Chain had gotten in created a user account and started sending out paypal spam from my mail server. They used three poxry servers two in hong kong and one in new york. So I just decided to play it safe and wipe the system and start over. SendMail seems to be very vulnerable.
  12. topdog

    topdog New Member HowtoForge Supporter

    I think you are blaming the wrong horse, first of all unconfigured sendmail does not listen to the network so how could someone use a vulnerability in a service they can not get access to, to take over your system.

    You should be looking else where

Share This Page