Hi

I seems to have a serious problem with spam on one of my accounts. I have csf firewall installed. I have done all the recomended settings for SMTP and firewall and on of my account there unlimited number of spam coming in and out. Mail queue is always fulll of messages. Thousands of them. I keep on deleting and it has another thousand in less than an hour. It has been like this for the past few days I guess. I made an alias for the root and I continuously get the following warning. Any idea what this is and how I can stop the spam. Thanks for you help

Time: Sun Jun 14 16:26:26 2009 -0400
PID: 10276
Account: sawc
Uptime: 132 seconds


Executable:

/usr/bin/perl


Command Line (often faked in exploits):

spamd child


Network connections by the process (if any):

tcp: 127.0.0.1:783 -> 0.0.0.0:0
tcp: 127.0.0.1:783 -> 127.0.0.1:38801
udp: 74.52.156.194:45518 -> 69.56.222.10:53


Files open by the process (if any):

/dev/null
/dev/null
/dev/null
/usr/bin/spamd
/usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/VBounce.pm


Memory maps by the process (if any):

00110000-0024e000 r-xp 00000000 03:05 1867991 /lib/libc-2.5.so
0024e000-00250000 r-xp 0013e000 03:05 1867991 /lib/libc-2.5.so
00250000-00251000 rwxp 00140000 03:05 1867991 /lib/libc-2.5.so
00251000-00254000 rwxp 00251000 00:00 0
00254000-00258000 r-xp 00000000 03:03 656679 /usr/lib/perl5/5.8.8/i686-linux/auto/Socket/Socket.so
00258000-00259000 rwxp 00003000 03:03 656679 /usr/lib/perl5/5.8.8/i686-linux/auto/Socket/Socket.so
00259000-0025b000 r-xp 00000000 03:03 656686 /usr/lib/perl5/5.8.8/i686-linux/auto/MIME/Base64/Base64.so
0025b000-0025c000 rwxp 00002000 03:03 656686 /usr/lib/perl5/5.8.8/i686-linux/auto/MIME/Base64/Base64.so
0025c000-00261000 r-xp 00000000 03:03 661569 /usr/lib/perl5/5.8.8/i686-linux/auto/List/Util/Util.so
00261000-00262000 rwxp 00004000 03:03 661569 /usr/lib/perl5/5.8.8/i686-linux/auto/List/Util/Util.so
0028e000-00291000 r-xp 00000000 03:03 661635 /usr/lib/perl5/5.8.8/i686-linux/auto/Sys/Syslog/Syslog.so
00291000-00292000 rwxp 00002000 03:03 661635 /usr/lib/perl5/5.8.8/i686-linux/auto/Sys/Syslog/Syslog.so
002ea000-002f0000 r-xp 00000000 03:03 656716 /usr/lib/perl5/5.8.8/i686-linux/auto/SDBM_File/SDBM_File.so
002f0000-002f1000 rwxp 00005000 03:03 656716 /usr/lib/perl5/5.8.8/i686-linux/auto/SDBM_File/SDBM_File.so
00326000-0032a000 r-xp 00000000 03:03 661620 /usr/lib/perl5/5.8.8/i686-linux/auto/Time/HiRes/HiRes.so
0032a000-0032b000 rwxp 00003000 03:03 661620 /usr/lib/perl5/5.8.8/i686-linux/auto/Time/HiRes/HiRes.so
00335000-00338000 r-xp 00000000 03:03 656436 /usr/lib/perl5/5.8.8/i686-linux/auto/File/Glob/Glob.so
00338000-00339000 rwxp 00002000 03:03 656436 /usr/lib/perl5/5.8.8/i686-linux/auto/File/Glob/Glob.so
003a5000-003a6000 r-xp 00000000 03:03 661630 /usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/Net/DNS/DNS.so
003a6000-003a7000 rwxp 00001000 03:03 661630 /usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/Net/DNS/DNS.so
0045b000-0045e000 r-xp 00000000 03:03 656714 /usr/lib/perl5/5.8.8/i686-linux/auto/IO/IO.so
0045e000-0045f000 rwxp 00002000 03:03 656714 /usr/lib/perl5/5.8.8/i686-linux/auto/IO/IO.so
0045f000-00461000 r-xp 00000000 03:03 656907 /usr/lib/perl5/5.8.8/i686-linux/auto/Cwd/Cwd.so
00461000-00462000 rwxp 00001000 03:03 656907 /usr/lib/perl5/5.8.8/i686-linux/auto/Cwd/Cwd.so
004be000-004c7000 r-xp 00000000 03:05 1867841 /lib/libnss_files-2.5.so
004c7000-004c8000 r-xp 00008000 03:05 1867841 /lib/libnss_files-2.5.so
004c8000-004c9000 rwxp 00009000 03:05 1867841 /lib/libnss_files-2.5.so
0050f000-00525000 r-xp 00000000 03:03 656533 /usr/lib/perl5/5.8.8/i686-linux/auto/POSIX/POSIX.so
00525000-00526000 rwxp 00015000 03:03 656533 /usr/lib/perl5/5.8.8/i686-linux/auto/POSIX/POSIX.so
0080b000-00826000 r-xp 00000000 03:02 753779 /var/lib/spamassassin/compiled/3.002004/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
00826000-00827000 rwxp 0001a000 03:02 753779 /var/lib/spamassassin/compiled/3.002004/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
00890000-008aa000 r-xp 00000000 03:05 1867985 /lib/ld-2.5.so
008aa000-008ab000 r-xp 00019000 03:05 1867985 /lib/ld-2.5.so
008ab000-008ac000 rwxp 0001a000 03:05 1867985 /lib/ld-2.5.so
00973000-00974000 r-xp 00973000 00:00 0 [vdso]
009f4000-009f6000 r-xp 00000000 03:05 1867996 /lib/libdl-2.5.so
009f6000-009f7000 r-xp 00001000 03:05 1867996 /lib/libdl-2.5.so
009f7000-009f8000 rwxp 00002000 03:05 1867996 /lib/libdl-2.5.so
009fa000-00a0d000 r-xp 00000000 03:05 1868008 /lib/libpthread-2.5.so
00a0d000-00a0e000 r-xp 00012000 03:05 1868008 /lib/libpthread-2.5.so
00a0e000-00a0f000 rwxp 00013000 03:05 1868008 /lib/libpthread-2.5.so
00a0f000-00a11000 rwxp 00a0f000 00:00 0
00a13000-00a38000 r-xp 00000000 03:05 1867998 /lib/libm-2.5.so
00a38000-00a39000 r-xp 00024000 03:05 1867998 /lib/libm-2.5.so
00a39000-00a3a000 rwxp 00025000 03:05 1867998 /lib/libm-2.5.so
00ab3000-00aba000 r-xp 00000000 03:05 1868028 /lib/librt-2.5.so
00aba000-00abb000 r-xp 00006000 03:05 1868028 /lib/librt-2.5.so
00abb000-00abc000 rwxp 00007000 03:05 1868028 /lib/librt-2.5.so
00abe000-00ac7000 r-xp 00000000 03:05 1869340 /lib/libcrypt-2.5.so
00ac7000-00ac8000 r-xp 00008000 03:05 1869340 /lib/libcrypt-2.5.so
00ac8000-00ac9000 rwxp 00009000 03:05 1869340 /lib/libcrypt-2.5.so
00ac9000-00af0000 rwxp 00ac9000 00:00 0
00af2000-00b05000 r-xp 00000000 03:05 1867986 /lib/libnsl-2.5.so
00b05000-00b06000 r-xp 00012000 03:05 1867986 /lib/libnsl-2.5.so
00b06000-00b07000 rwxp 00013000 03:05 1867986 /lib/libnsl-2.5.so
00b07000-00b09000 rwxp 00b07000 00:00 0
00c7e000-00c87000 r-xp 00000000 03:03 661563 /usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/HTML/Parser/Parser.so
00c87000-00c88000 rwxp 00008000 03:03 661563 /usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/HTML/Parser/Parser.so
00cb1000-00cb4000 r-xp 00000000 03:03 656448 /usr/lib/perl5/5.8.8/i686-linux/auto/Fcntl/Fcntl.so
00cb4000-00cb5000 rwxp 00002000 03:03 656448 /usr/lib/perl5/5.8.8/i686-linux/auto/Fcntl/Fcntl.so
00cf8000-00cfb000 r-xp 00000000 03:03 661641 /usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/BSD/Resource/Resource.so
00cfb000-00cfc000 rwxp 00002000 03:03 661641 /usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/BSD/Resource/Resource.so
00d4e000-00d52000 r-xp 00000000 03:03 661644 /usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/Digest/SHA1/SHA1.so
00d52000-00d53000 rwxp 00003000 03:03 661644 /usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/Digest/SHA1/SHA1.so
04f00000-04f02000 r-xp 00000000 03:05 1869300 /lib/libutil-2.5.so
04f02000-04f03000 r-xp 00001000 03:05 1869300 /lib/libutil-2.5.so
04f03000-04f04000 rwxp 00002000 03:05 1869300 /lib/libutil-2.5.so
08047000-08126000 r-xp 00000000 03:03 65680 /usr/bin/perl
08126000-0812a000 rw-p 000de000 03:03 65680 /usr/bin/perl
0812a000-0812c000 rw-p 0812a000 00:00 0 09ef5000-0b495000 rw-p 09ef5000 00:00 0 b7f2c000-b7f2f000 rw-p b7f2c000 00:00 0
bfe76000-bfea4000 rw-p bfe76000 00:00 0 [stack]