Tag Info

Hot answers tagged

2

I overcome this issue after a long time. In routers section wrote my own custom router that will deliver email to my desired php script. In transport section wrote my own custom transport that will ensure delivery to the desired script using curl. Just wrote the following configurations in my /etc/exim.cnf file: ############ROUTERS runscript: driver ...


2

Run exim -bP log_file_path to get a templated log-file path; replace %s with main, and use that as the logfile to look at. (also %D for date, etc). If that really points to the same main.log file which you looked at, then use lsof, see if you have broken log-file rotation or something. If the file is the current log-file, the filesystem is not full, ...


1

As root, you can use ps aux to show all the processes, and look for anything suspicious. You can also use find /path/to/cgi-bin -iname \*.php to look for attacker-introduced PHP scripts. But, it might not be seen by either of those things depending on what the attack is. If you suspect an attacker has control over your server, looking for the script is an ...


1

A single server can have multiple names. It can be achieved by a proper configuration of Domain Name Server. Just add additional 'A' or 'CNAME' entries in your DNS Server pointing to the IP Address or the main name of your server respectively. In my case I put some fictional names on the servers and on the 'PTR' register and create a lot of 'CNAME's with ...


1

Rewrite does exactly what you want. Respectively to the flags all mentions of one domain in the message will be replaced by the other domain. That behavior can be simulated by redirect router that remove and add the headers, result will be exactly the same.



Only top voted, non community-wiki answers of a minimum length are eligible