[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

unlikely (Re: sendmail owned?)



Quoting Alexander Farber (Alexander_(_dot_)_Farber_(_at_)_t-online_(_dot_)_de):
> Argh, does this mean that the sendmail is owned on my fathers machine?
> 
> Apr  9 14:33:26 simplex sm-mta[29968]: h39ETP0s029968: lost input channel from shooter [192.168.1.32] to MTA after rcpt
> Apr  9 14:33:26 simplex sm-mta[29968]: h39ETP0s029968: from=<Abram_(_dot_)_Farber_(_at_)_t-online_(_dot_)_de>, size=0
> , class=0, nrcpts=1, proto=SMTP, daemon=MTA, relay=shooter [192.168.1.32]
> 

shooter connected to simplex.  It issued a RCPT TO: command
and the connection dropped (Mail From: abram.farber... was issued first).
Why does this indicate crackers?

> it's an OpenBSD 3.2 PC with:
> 
> simplex:alex {521} sudo tail -1 /var/run/sendmail.pid 
> /usr/sbin/sendmail -L sm-mta -bd -q30m
> 
> But I didn't have the time to update the sendmail yet...

You don't have time NOT to update the sendmail yet.
You can even use the stock sendmail package from sendmail.org.



Visit your host, monkey.org