RE: [cobalt-users] Raq4 strange behavior

[Bob G7 <Bob_G7@xxxxxxxxxx>]

> I have a raq4r with 512MB and just a few minutes ago the web server and
> email server stopped working, I could log in with telnet and could see
> errors in the maillog like (removed the users and server names) :
>
> Aug  6 14:16:19 raq sendmail[21716]: g76JDdB21716: SYSERR: putoutmsg
> (list.offic
> er.com): error on output channel sending "250 2.1.5 <xxxx@xxxxxxxxxxxxx>.
> .. Recipient ok (will queue)": Broken pipe
> Aug  6 14:16:19 raq sendmail[21716]: g76JDdB21716: lost input
> channel from
> list.
> officer.com [xxx.xxx.xxx.xxx] (may be forged) to MTA after rcpt
> Aug  6 14:16:19 raq sendmail[21716]: g76JDdB21716: from=<xxxx@xxxxxxxxxxx
>  >, size=7168, class=0, nrcpts=0, proto=ESMTP, daemon=MTA,
> relay=list.officer.com [xxx.xxx.xxx.xxx] (may be forged)
> Aug  6 14:17:05 raq sendmail[21756]: g76JEOB21756: SYSERR: putoutmsg
> (list.officer.com): error on output channel sending "250 2.1.5
> <xxxx@xxxxxxxxxxxxx>.
> .. Recipient ok (will queue)": Broken pipe
> Aug  6 14:17:05 raq sendmail[21756]: g76JEOB21756: lost input
> channel from
> list.
>
> After reboot all came up fine however when I telnet in the system seems
> flaky when I try to log in as su the system also is doing one
> other thing,
> when I do a "tail -f /var/log/maillog" I get the current log info
> but then
> I'm put back to the command line. Before the server had this problem I
> could use the "tail -f /var/log/maillog" to watch the mail log. Any one
> seen this before?
>
> Any help would be great.
>
> Scott
>
Could it be that someone is trying to use your server as a relay? I'm just
thinking that they may have slammed your mail and seb services and they
shutdown.

Just my 2 cents