[cobalt-users] (no subject)

["Dawn D. Pfaltzgraff" <ddpfz@xxxxxxxxxx>]

Over the past couple of days have noticed the traffic for a CacheRaq4 at 
one of our schools is seeing an INSANE amount of traffic.   The 
administrator there keeps receiving a whole bunch of mail returned mail. 
(vulnerable SMTP, seems to be "undeliverable" spam).  Having gotten 
"complaints" from the outside world.  So anybody got any ideas? It's behind 
a Sonic Wall and the following ports are the only ones that appear to be 
open, netbios (137,138), telnet and squid (SMTP is opened).  Now I have 
also noticed that everytime a "Squid child" starts up it exits on  "signal 
6".  I'm not sure where to start on this one, if anyone has any 
suggestions, please let me know.    As for updates, the box has been 
updated with the Cobalt updates and nothing else.  What also conerns me is 
on the cacheraq4 boxes, the last "update" Cobalt/Sun release for this box 
was back in 2001! Other than that... it's straight out of the box.  Is 
squid a problem or something?  Is there a none vulnerability with squid 
(vs. 2.3 I believe)?  Should there be other updates from Cobalt??

Thanks,
Dawn



Dawn D. Pfaltzgraff
System Administrator
Premier Systems -plains.net
ddpfz@xxxxxxxxxx
(970-848-0475)