RE: Hacked? Was RE: [cobalt-users] ATT Cable changed email addreses, how to find them?

["agility" <webmgr@xxxxxxxxxxxxxxxxxx>]

> >Oh Crunch, not a good sign!
> >My virtusertable contains a lot of entries that I'm sure should not be
> >there.
> >such as
> >MAILER-DAEMON@xxxxxxxxxxxxxxxx
> >root@xxxxxxxxxxxxxxxx
> >sys@xxxxxxxxxxxxxxxx
> >postmaster@xxxxxxxxxxxxxxxx
> >
> >there are a load of these type of entry in my Virtusertable for several
> >sites.
> >
> >are my worst fears correct, I've been hacked big time?
>
>
> And just why shouldn't those entries be there?
> What mail boxes are listed after them? site admins? system admin?
> Those are added to each site, THAT is one reason you can't use
> them as alias's.
>
Ok, putting the valium down, loosening the collar, getting up and walk about
a bit.

Thanks David.
I did sort the file locally and notice that certain names related to certain
conditions, ie. all sites have a MAILER-DAEMON record.

Ok, breathing again - just for a short while - till the anti-paranoia pills
wear off.

Paul.