[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Hacked? Was RE: [cobalt-users] ATT Cable changed email addreses, how to find them?



On Mon, 30 Jun 2003, agility wrote:
> Ok, putting the valium down, loosening the collar, getting up and walk about
> a bit.
>
> Thanks David.
> I did sort the file locally and notice that certain names related to certain
> conditions, ie. all sites have a MAILER-DAEMON record.
>
> Ok, breathing again - just for a short while - till the anti-paranoia pills
> wear off.

  If you are looking for users that forward to @attbi.com
  then I think that would be a procmail function.
  IIRC in the user's directory .forward file

Gerald
--
http://frontstreetnetworks.com | http://store.raqware.com
  Front Street Networks LLC, 229 Front Street, Ste.#C
  New Haven, CT 06513-3203 | phone: +1-203-785-0699