Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 07 Apr 1997 13:07:03 +0300
From:      Nadav Eiron <nadav@barcode.co.il>
To:        jadeite <jadeite@light.pomona.edu>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: loggin mail port
Message-ID:  <3348C747.7962@barcode.co.il>
References:  <Pine.BSF.3.95q.970405155105.466A-100000@light.pomona.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
jadeite wrote:
> 
> Hi,
>         I'm trying to keep track of people logging into port 25.  I had
> syslog.conf report the following facilities:
> kern.*;lpr.*;mail.*;daemon.*;auth.* but I'm still not informed of telnets
> to port 25.  In fact the only clue I have is that when I do MAIL FROM: in
> smtp I'm told that /etc/aliases.db is out of date (I don't have such a
> file, only /etc/aliases, so this is could be an indication that I have
> another problem).  So, is there something in sendmail.cf that I need to
> configured so I'll know when someone telnets to port 25, or did I
> configure syslog.conf wrong?


I use TIS fwtk's smap/smapd and noticed it logs connections to the SMTP
port that does not actually send a message (something like: "QUIT
without DATA"). It is much more secure than sendmail, so you may want to
give it a try anyhow.

If you want to log *every* connection to the SMTP port, you can use ipfw
to do that.

Nadav



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3348C747.7962>