Lukket

Server secure - Need someone with experience of Linux Server

We just have been atack with "Spam" to our server and would need someone who knows how this can be prefent to happen again, also someone which is maybe able to trace the sender of this "Spam" [url removed, login to view] someone which can help to setup some website of ours to a new server( still we have to get firts a good server,maybe you can help on this too)

We do need someone which is firm with Linux dedicated server!

Maybe you would get some idea at see to the "Spam" below.

The website mention have taken out from our server now:

SpamCop V1.564.2.1 ]

This message is brief for your comfort. Please use links below for details.

Spamvertised web site: http://www........../

[url removed, login to view]

[ Offending message ]

Return-Path:

Received: from [url removed, login to view] ([[url removed, login to view]])

by [url removed, login to view] (8.13.6/8.13.6) with SMTP id k4MJirqs083417

for ; Mon, 22 May 2006 21:45:01 +0200 (CEST)

(envelope-from )

Received: from [url removed, login to view] by [url removed, login to view]; Mon, 22 May 2006 15:35:59 -0500

Message-ID:

From: "IBGNetwork"

Reply-To: "IBGNetwork"

To: x

Subject: IBGNetwork for all your website needs

Date: Mon, 22 May 2006 15:38:59 -0500

X-Mailer: QUALCOMM Windows Eudora Version 5.1

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--666083484916011"

X-Priority: 3

X-MSMail-Priority: Normal

X-XS4ALL-DNSBL-Checked: [url removed, login to view] checked [url removed, login to view] against DNS

blacklists

X-XS4ALL-DNSBL-Warning: Sending machine is listed in

[url removed, login to view],[url removed, login to view],[url removed, login to view]

X-Virus-Scanned: by XS4ALL Virus Scanner

X-XS4ALL-Spam-Score: 22.294 (**********************)

DCC_CHECK,EARN_MONEY,FORGED_YAHOO_RCVD,HTML_FONTCOLOR_RED,HTML_FONT_BIG,HTML

_MESSAGE,HTML_MIME_NO_HTML_TAG,HTML_TAG_BALANCE_BODY,MIME_BOUND_DD_DIGITS,MI

ME_HTML_NO_CHARSET,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MISSING_MIMEOLE,MISSI

NG_OUTLOOK_NAME,MSGID_SPAM_CAPS,RCVD_DOUBLE_IP_SPAM,RCVD_IN_XBL,XS_INVEST

X-XS4ALL-Spam: YES

Envelope-To: x

X-Envelope-To: x

X-IP-Chain: [[url removed, login to view]]

X-RBL-Warning: [url removed, login to view] is listed in

[url removed, login to view],[url removed, login to view],[url removed, login to view]

X-RBL-Host-Warning: [url removed, login to view] [[url removed, login to view]] is listed in

[url removed, login to view],[url removed, login to view]

X-XS4ALL-Spam-Warning: 27.228

----666083484916011

Content-Type: text/html;

Content-Transfer-Encoding: quoted-printable

PLEASE WE DO NEED SOMEONE TO HELP ON THIS MATTER
WE HAVE BEEN JUST ATTACK AGAIN !

SpamCop V1.564.2.1 ]
This message is brief for your comfort. Please use links below for details.

Spamvertised web site: http://www.citymall.co.nz/
http://www.spamcop.net/w3m?i=z1761627397zaf5595f949af000cc7be59b77baea8e9z
http://www.citymall.co.nz/ is 65.110.35.120; Tue, 23 May 2006 12:13:39 GMT

Spamvertised web site: http://www.fairdeal.co.nz/
http://www.spamcop.net/w3m?i=z1761627402z90ad1c8faf253a0edd1f9a0a5e6f616az
http://www.fairdeal.co.nz/ is 65.110.35.120; Tue, 23 May 2006 12:13:39 GMT

Spamvertised web site: http://www.ibg.co.nz/
http://www.spamcop.net/w3m?i=z1761627406z2666aefa9ea5938f97c973be205dfd8ez
http://www.ibg.co.nz/ is 65.110.35.120; Tue, 23 May 2006 12:13:39 GMT

Spamvertised web site: http://www.kiwideals.co.nz/
http://www.spamcop.net/w3m?i=z1761627412zc6f70e11afec52f7e0e8c700b2508cb1z
http://www.kiwideals.co.nz/ is 65.110.35.120; Tue, 23 May 2006 12:13:39 GMT

Spamvertised web site: http://www.netline.co.nz/
http://www.spamcop.net/w3m?i=z1761627417zdaa53f2edc788b37f6aa8f686daf191dz
http://www.netline.co.nz/ is 65.110.35.120; Tue, 23 May 2006 12:13:40 GMT

[ Offending message ]
Received: from mail.wise.net.nz (localhost [127.0.0.1])
by mail.wise.net.nz (8.13.4/8.13.4/Debian-3sarge1) with ESMTP id
k4NC30YC014377
for ; Wed, 24 May 2006 00:03:00 +1200
Received: (from reportspam@localhost)
by mail.wise.net.nz (8.13.4/8.13.4/Submit) id k4NC2xej014373
for x; Wed, 24 May 2006 00:02:59 +1200
Received: from mpl69-1-82-232-140-66.fbx.proxad.net
(mpl69-1-82-232-140-66.fbx.proxad.net [82.232.140.66])
by mail.wise.net.nz (8.13.4/8.13.4/Debian-3sarge1) with SMTP id
k4NBvjux009594
for ; Tue, 23 May 2006 23:57:57 +1200
X-Received-For:
Received: from 81.164.48.217 by 82.232.140.66; Tue, 23 May 2006 09:49:48
-0300
Message-ID:
From: "IBG"
Reply-To: "IBG"
To: x
Subject: ***SPAM*** need a website? contact us
Date: Tue, 23 May 2006 05:49:48 -0700
X-Mailer: Microsoft Outlook Express 6.00.2462.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--509688169477826"
X-Priority: 3
X-MSMail-Priority: Normal
X-Virus-Status: No
X-Spam-Prev-Subject: need a website? contact us
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on kiwi.wise.net.nz
X-Spam-Level: ***************************************
X-Spam-Status: Yes, score=39.4 required=5.5
tests=BAYES_80,DNS_FROM_RFC_WHOIS,
FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,
FORGED_YAHOO_RCVD,HELO_DYNAMIC_IPADDR,HTML_80_90,HTML_FONT_BIG,
HTML_FONT_INVISIBLE,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,
MIME_BOUND_DD_DIGITS,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,
MISSING_MIMEOLE,MPART_ALT_DIFF,MSGID_SPAM_CAPS,RCVD_BY_IP,
RCVD_DOUBLE_IP_SPAM,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DSBL,
RCVD_IN_SORBS_DUL,RCVD_IN_XBL autolearn=spam version=3.0.3
X-Spam-Report:
* 4.1 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
* 4.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname
(IP addr 1)
* 3.8 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant)
* 0.1 RCVD_BY_IP Received by mail server with no name
* 2.7 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received'
headers
* 0.1 HTML_80_90 BODY: Message is 80% to 90% HTML
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 2.0 BAYES_80 BODY: Bayesian spam probability is 80 to 95%
* [score: 0.9009]
* 0.1 HTML_FONT_BIG BODY: HTML tag for a big font size
* 0.1 MPART_ALT_DIFF BODY: HTML and text parts are different
* 0.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 0.0 HTML_FONT_INVISIBLE BODY: HTML font color is same as
background
* 0.3 DNS_FROM_RFC_WHOIS RBL: Envelope sender in
whois.rfc-ignorant.org
* 3.1 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
* [82.232.140.66 listed in sbl-xbl.spamhaus.org]
* 2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
address
* [82.232.140.66 listed in dnsbl.sorbs.net]
* 3.8 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
* []
* 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
* [Blocked - see
]
* 4.1 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found
* 0.6 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
* 0.1 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
* 0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
* 2.4 MIME_HTML_ONLY_MULTI Multipart message only has text/html
MIME parts
* 0.0 MISSING_MIMEOLE Message has X-MSMail-Priority, but no
X-MimeOLE
* 3.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS
Outlook

----509688169477826
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable



IBG is a leading=
, e-commerce
and professional
services group focused on building web site businesses for our clients thr=
ough
application of internet technologies. We offer a wide range of specialized=

Internet business services and promotions.
Need a website? =
contact us
www.ibg.co.nz
need promo=
tion?
contact us www.ibg.co.nz=

need =
advice
contact us www.ibg.co.nz

our other sites please visit t=
hem as
well







=

CityMall.co.nz








NetLine.co.nz







=

Fairdeal.co.nz








Kiwideals.co.nz






www.fairdeal.co.nz






----509688169477826--

Færdigheder: Dataindførsel, Jura, Linux, Web Sikkerhed

Se mere: www website setup org, site v1, return path, net by need, need linux help, linux web, l2, how to get a dns server, how do you get linux, spam score missing_mimeole, get linux, dns org, web scanner, trace, the server is sending spam from a website, spamcop, someone from, setup server, server, server help, secure web site, printable, nz, nerd, need virus

Om arbejdsgiveren:
( 0 bedømmelser ) christchurch, New Zealand

Projekt-ID: #62906

13 freelancers are bidding on average $160 for this job

yunusyb

Please see PMB

$100 USD på 1 dag
(165 bedømmelser)
6.3
webta

Full security audit of your server will be performed withi my bid. If that email was originating for your server, we can set outgoing email limits. Would love to start working immediately. Thanks, Alex.

$200 USD in 0 dage
(8 bedømmelser)
5.4
symtab

I can do a security audit of your server, fix all found problems and install some hardening tools. I need one day for the audit and 1 for the upgrades.

$150 USD in 2 dage
(13 bedømmelser)
4.4
elfuerte

Check PMB for more information.

$200 USD in 0 dage
(9 bedømmelser)
4.4
t3nt3tion

I`ve sent you a private message that you might want to take in consideration. ;)

$300 USD in 3 dage
(15 bedømmelser)
4.3
xming

I have been fighting spam for more than 6 years. I have worked with one of the largest ISP in Belgium with 600K+ mailboxes.

$250 USD på 1 dag
(1 bedømmelse)
2.0
netkinetics

Will secure the existing server. Looks like a domain is benefitting from spam being sent from elsewhere. We also have fully dedicated and VPS servers available to lease for clients. We have been in business for over 8 Mere

$100 USD på 1 dag
(2 bedømmelser)
1.4
laurus

I am working on linux security since 2 years. And have made application like anti-piracy concepts, which will detect any anauthorized installation of software. I have written 5 days, which is maximum. Once i st Mere

$100 USD in 5 dage
(1 bedømmelse)
1.6
manindersingh

I work at a webhosting company. We get the same issues like you have and we solve them everyday. I am sure to solve your issue and I have good contact with Spamcop :) Thanks.

$150 USD in 7 dage
(0 bedømmelser)
0.0
Boter

This spam is not a problem if you choose me. I can prevent 90% of spam not to come anymore - Since postfix has greylisting, you're done with spam for some time. I can help you to move the site too. I dont have dedic Mere

$100 USD in 2 dage
(0 bedømmelser)
0.0
Lsief

I have experience in same problem

$175 USD in 0 dage
(1 bedømmelse)
0.0
NaveenSEO

Dear Sir, My name is naveen kumar and i am from delhi and i am expert in link building and currently working as a SEO in Increasepr online solution Pvt ltd. I am working on 12 projects right now and some of them Mere

$150 USD in 60 dage
(0 bedømmelser)
0.0
labasus

All that U need. Antispam/Antivirus solutions. Big expierience & professional work.

$100 USD in 3 dage
(0 bedømmelser)
0.0