My server is listed in Spamcop as one of my users if mass sending out fraud mail.. I manage to find out the log..
2005-01-07 09:55:49 1CmjLx-0001W2-GS <= [email protected] U=apache P=local S=2375 T="Fraud Notice
[07 Jan 2005 4:43 PM]" from <[email protected]> for [email protected]
There is still similar mail to other addresses..
How do I find out who send the e-mail? Why is the userid listed as apache? I tried to access my /var/log/httpd/access_log but it's blank inside...
Pls advice so i can catch the culprit..
Thank you
2005-01-07 09:55:49 1CmjLx-0001W2-GS <= [email protected] U=apache P=local S=2375 T="Fraud Notice
[07 Jan 2005 4:43 PM]" from <[email protected]> for [email protected]
There is still similar mail to other addresses..
How do I find out who send the e-mail? Why is the userid listed as apache? I tried to access my /var/log/httpd/access_log but it's blank inside...
Pls advice so i can catch the culprit..
Thank you