[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] Re: Strange message: sendmail startup with someone elses IP address
- Subject: [cobalt-users] Re: Strange message: sendmail startup with someone elses IP address
- From: Bruce Timberlake <bruce@xxxxxxxxxx>
- Date: Tue May 11 16:27:02 2004
- Organization: BRTnet.org
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
> Is someone POPPING IN to get their email or is it someone opening a
> connection SEND (SMTP) email through my box. These guys are in the
> Asia Pacific Network.
>
> I have POP before RELAY selected in my ADMIN area. Does this mean I
> have a compromises USER ACCOUNT?
Sendmail processes are SMTP connections, someone trying to send mail
into (or possibly through) your server.
POP and IMAP connections are controlled via the inetd daemon.
Logs of all are in /var/log/maillog. If you do
tail -f /var/log/maillog
as root, you will see realtime info about SMTP connections (success or
rejection and why), as well as POP/IMAP connections by your users.
P.S. - This list will be closing down Friday, 14 May 2004. Please
visit http://www.cobaltfacts.com and/or http://lists.qbalt.com to
subscribe to an alternate list for continued help after Friday.