<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Quick answer that might be helpful.<br>
<br>
Requires SSH access:<br>
fuser -n tcp 25<br>
will give process ID using port 25 (SMTP), and then<br>
ps process-id<br>
That will give you the process runing the smtp server<br>
and then kill it with (that will need root access)<br>
kill -15 process-id</p>
<p>Rich (sorry booked up to help directly - let me know if no other
answers.)<br>
</p>
<div class="moz-cite-prefix">On 9/11/2024 1:16 PM, Steven Aronstein
via Hidden-discuss wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAOGspOjNYzYjuSLznpQMEBKJrNy6TQhsFGYjRMormz03twwqpw@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Hi,
<div><br>
</div>
<div>We have an email server (Communigate hosted on Linode) that
stopped responding. We discovered it was because something
else on the server started using port 25. Except it wasn't
anything we installed. </div>
<div><br>
</div>
<blockquote class="gmail_quote"
style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">master
811 root 13u IPv4 28666 0t0 TCP <a href="http://127.0.0.1:25"
moz-do-not-send="true">127.0.0.1:25</a> (LISTEN) master 811
root 14u IPv6 28667 0t0 TCP [::1]:25 (LISTEN)</blockquote>
<div><br>
</div>
<div>Then Linode warned us (and blocked) our server because the
detected spam being sent from it. Which wasn't us.</div>
<div><br>
</div>
<div>So, we appear to have some kind of virus or app that has
hacked into our server and is using it.</div>
<div> </div>
<div>This may actually be a fairly simple process for someone in
the know, but we don't have the resources at this moment to be
that someone fast enough. We've had enough bad experiences
hiring random gig workers online that we don't want to trust
someone like that with access, however brief, to our mail
server.</div>
<div><br>
</div>
<div>Is there anyone in this group or locally or that people
here trust up for a quick gig finding and purging the
uninvited guest from our server so the mail server starts
running and Linode will unblock it?</div>
<div><br>
</div>
<div>You can call or text or email me privately as well. All
suggestions, guidance, or references welcome.</div>
<div><br>
</div>
<div>Thanks!</div>
<div>Steve</div>
<div>413-207-5610</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Hidden-discuss mailing list - home page: <a class="moz-txt-link-freetext" href="http://www.hidden-tech.net">http://www.hidden-tech.net</a>
<a class="moz-txt-link-abbreviated" href="mailto:Hidden-discuss@lists.hidden-tech.net">Hidden-discuss@lists.hidden-tech.net</a>
You are receiving this because you are on the Hidden-Tech Discussion list.
If you would like to change your list preferences, Go to the Members
page on the Hidden Tech Web site.
<a class="moz-txt-link-freetext" href="http://www.hidden-tech.net/members">http://www.hidden-tech.net/members</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Rich Roth
CEO TnR Global
Bio and personal blog: <a class="moz-txt-link-freetext" href="http://rizbang.com">http://rizbang.com</a>
Building the really big sites: <a class="moz-txt-link-freetext" href="http://www.tnrglobal.com">http://www.tnrglobal.com</a>
Small/Soho business in the PV: <a class="moz-txt-link-freetext" href="http://www.hidden-tech.net">http://www.hidden-tech.net</a>
Places to meet for business: <a class="moz-txt-link-freetext" href="http://www.meetmewhere.com">http://www.meetmewhere.com</a>
And for Arts and relaxation:
<a class="moz-txt-link-freetext" href="http://TarotMuertos.com">http://TarotMuertos.com</a> - Artistic Tarot Deck
<a class="moz-txt-link-freetext" href="http://www.welovemuseums.com">http://www.welovemuseums.com</a>
<a class="moz-txt-link-freetext" href="http://www.artonmytv.com/">http://www.artonmytv.com/</a>
Shakers: <a class="moz-txt-link-freetext" href="http://www.shakerpedia.com/">http://www.shakerpedia.com/</a>
Helping move the world: <a class="moz-txt-link-freetext" href="http://www.earththrives.com">http://www.earththrives.com</a></pre>
</body>
</html>