Jump to content
Froxlor Forum
  • 0

Webserver error lists missing wpad.dat, connection to spam?


webass

Question

Hello,

I have received this error message from apache

[Tue Jan 24 13:56:05 2012] [error] [client 188.165.169.13] File does not exist: /var/www/froxlor/wpad.dat]

ten days later, my server was considered as spammer and blacklisted.

 

Might there be any connection between the two cases?

 

We stopped the mailserver. Checked the logs and found out, that the webserver connected over an open proxy to the smtpd prcess and settled an open relay through this.

So, I blocked outbound port 25 for now.

Telnet says, that anybody could connect and send mails.

 

But we need to find out what was happening.

Anybody a clue?

 

Cheers.

Andre

P.S.: The system is Debian Squeeze updated, with curretn froxlor version.

Scripts like Joomla or WP are updated too.

Link to comment
Share on other sites

4 answers to this question

Recommended Posts

what services do you have running?

pull a copy of everything in /var/log to another system for ananlysis.

do you know when this started happening?

I dont get exactly what You mean here:

pull a copy of everything in /var/log to another system for ananlysis.
Link to comment
Share on other sites

Hi,

sorry for not responding so long.

I have stopped using froxlor on my main system.

I now use it on a different server.

 

The main system is running under ISPCP, now, freshly installed and configured on a dedicated by the hoster, but this message with missing wpad is also popping up in logs on the new one, ISPCP.

 

I really would like to know what this wpad is for and why it is missing on freshly installed systems.

Some sysadmins I asked can't answer too, also when looking on the server.

Cheers.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.



×
×
  • Create New...