Date: Mon, 29 Mar 1999 10:29:53 +1200 From: "Dan Langille" <junkmale@xtra.co.nz> To: David Martin <dmartin@badlands.ris.sdbor.edu> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: help Message-ID: <19990328223125.VJQP5117602.mta2-rme@wocker> In-Reply-To: <Pine.BSF.4.05.9903281617270.14281-100000@badlands.ris.sdbor.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On 28 Mar 99, at 16:20, David Martin wrote: > Could somebody please tell me what the following line means, i've never > seen it before. It comes from my log files. > > sendmail[13664]: NOQUEUE: Null connection from > > I'm guessing it's a hack attempt, since right above this entry the person > tried to finger and ftp to my box. Not quite a hack, but an attempt to see your mail headers to see what version of sendmail you are running. Using this information they might be able to use a known exploit from an older version of sendmail. Check your www logs too. If all of these connections were within a few seconds of each other, I'd suspect a kiddie script. In which case, I'd post a polite message to the ISP concerned so they can take action. Include the logs excerpts. hth. -- Dan Langille The FreeBSD Diary http://www.FreeBSDDiary.com/freebsd To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990328223125.VJQP5117602.mta2-rme>