Re: [cobalt-users] logcheck and cobalt-developers-admin@xxxxxxxxxxxxxxx

[flash22@xxxxxxx]

On Wed, 23 May 2001, Gerald Waugh wrote:

> Why am I getting these messages in my log files?
> 
> Security Violations
> =-=-=-=-=-=-=-=-=-=
> May 23 00:30:46 fsn3 sendmail[1140]: f4N4Uk301140:
> from=<cobalt-developers-admin@xxxxxxxxxxxxxxx>, size=3471, class=-60, nrcpts=1,
> msgid=<004801c0e339$7b381d50$3200a8c0@BADNOTE>, proto=ESMTP, daemon=MTA,
> relay=list.cobalt.com [63.77.128.170]

Probably matching the word 'BAD' ...(msgid) It's probably worth making a
logcheck rule to ignore the 'from' lines from sendmail unless they contain
unknown or denied...(msgid is quasi-random, so it will always generate
spurious hits...)

gsh