[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] rcfile question
- Subject: Re: [cobalt-users] rcfile question
- From: Dmitry Alexeyev <dmi_a@xxxxxxxxxx>
- Date: Thu Feb 12 04:23:08 2004
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
Hello!
- change this user password, maybe it is used by someone else;
- show ls -la /home/sites/site5/users/mdwyer/.procmailrc
- show cat /home/sites/site5/users/mdwyer/.procmailrc
Dmitry
> Hello,
> A user has reported that he is receiving spam email messages from
> himself. I run IPChains & Portsentry on my RaQ4. How can I check if
> the server has been compromised. Below is a new strange message in
> the log for this user.
>
> Feb 12 08:33:04 ns spamd[10668]: clean message (-4.9/5.0) for
> mdwyer:119 in 3.0 seconds, 3016 bytes.
> Feb 12 08:33:04 ns procmail[10664]: Suspicious rcfile
> "/home/sites/site5/users/mdwyer/.procmailrc"
>
> Thanks,
> Declan.
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users