Mail Spam

[PhilD]

I noticed that I was getting spam sent through the store web site. I checked here and found info the contact_us.php exploit. Whatever I tried did not stop the spam, so I temp removed the contact us form. The spam still continues. I've locked down the SMTP on the local port not to allow deliveries from local to external addresses, but that means customers won't get order updates/confirmations.

 

Any ideas/suggestions on how to stop this?

 

Thanks

 

 

"TCPIP" 2036 "2011-04-21 17:06:15.312" "TCPConnection - Posting AcceptEx on 127.0.0.1:25"

"SMTPD" 2036 592 "2011-04-21 17:06:15.312" "127.0.0.1" "SENT: 220 mydomain.com ESMTP"

"SMTPD" 2060 592 "2011-04-21 17:06:15.312" "127.0.0.1" "RECEIVED: HELO myserver"

"SMTPD" 2060 592 "2011-04-21 17:06:15.312" "127.0.0.1" "SENT: 250 Hello."

"SMTPD" 2036 592 "2011-04-21 17:06:15.312" "127.0.0.1" "RECEIVED: MAIL FROM:<[email protected]>"

"SMTPD" 2036 592 "2011-04-21 17:06:15.328" "127.0.0.1" "SENT: 250 OK"

"SMTPD" 2092 592 "2011-04-21 17:06:15.328" "127.0.0.1" "RECEIVED: RCPT TO:<[email protected]>"

"SMTPD" 2092 592 "2011-04-21 17:06:15.328" "127.0.0.1" "SENT: 250 OK"

"SMTPD" 2092 592 "2011-04-21 17:06:15.328" "127.0.0.1" "RECEIVED: DATA"

"SMTPD" 2092 592 "2011-04-21 17:06:15.328" "127.0.0.1" "SENT: 354 OK, send."

"SMTPD" 1868 592 "2011-04-21 17:06:15.343" "127.0.0.1" "SENT: 250 Queued (0.015 seconds)"

"SMTPD" 2084 592 "2011-04-21 17:06:15.343" "127.0.0.1" "RECEIVED: QUIT"

"SMTPD" 2084 592 "2011-04-21 17:06:15.343" "127.0.0.1" "SENT: 221 goodbye"

 

W2K Server

IIS 5

PHP 5.1.4

OsCommerce 2.2-MS2

[PhilD]

I think I may have fixed by using a SMTP-auth contribution. Thanks.