Submitted by rjrsinc on Thu, 05/10/2012 - 06:48 Pro Licensee
This morning I saw about 4-5 emails from the Vmin notification system that were spam messages. I attached the PDF of one of them. Can you tell me if something on your system is compromised?
Status:
Closed (fixed)
Comments
No, nothing is compromised. Every once in a while a user signs up, confirms the email, and spams our forums or ticket tracker, or whatever. We usually delete the user within a few minutes, and delete the messages. And, we have some automated spam prevention tools in place, but when we get too aggressive with the automatic tools, it ends up killing legitimate posts (also, since people are occasionally posting copy/paste of logs and emails about/from spammers, things are made more complicated). So, we have to manually deal with a few messages every few days.
Apologies for the inconvenience, and spam. We try really hard to prevent it, and we're always tweaking the spam prevention processes and tools, but it still happens now and then.
Submitted by andreychek on Thu, 05/10/2012 - 06:55 Comment #2
A spammer had created an account on virtualmin.com, and posted comments to several forum posts and issues here in the tracker.
Their account was banned, and all the spam they posted was deleted.
Nothing was compromised, those are all actions that any user with an account on virtualmin.com could perform.
Submitted by rjrsinc on Thu, 05/10/2012 - 07:00 Pro Licensee Comment #3
Thanks for the response. I figured as much, but thought I would ask anyway. I know this is a different issue, but I see the there is an update for Vmin (3.92). Is there an area of the site or in Vmin that I can see what changes were made in the update before I apply it? Hoping for 12.04 compatibility. ;-)
Submitted by andreychek on Thu, 05/10/2012 - 07:06 Comment #4
Ubuntu 12.04 compatibility hasn't been officially released yet, though you can read about a beta version of the installer here:
http://www.virtualmin.com/node/22100
Submitted by rjrsinc on Thu, 05/17/2012 - 08:46 Pro Licensee Comment #5
Submitted by Locutus on Mon, 05/21/2012 - 06:15 Comment #6
"Every once in a while"? :D
To me it rather seems like lately you're getting spammed every 1-2 days. Just now I can again see 3-4 new spammer accounts and 5+ spammed threads.
It might be a good idea to do intensify your anti-spam measures. Of course it's a tradeoff... Question is what is more annoying. You having to delete spammers and posts every other day, and before you notice them, other users having to filter out those spam posts, or having a legitimate post rejected once in a while.