From owner-freebsd-security Wed May 23 5:37:13 2001 Delivered-To: freebsd-security@freebsd.org Received: from scooby.netsville.com (scooby.netsville.com [206.27.96.131]) by hub.freebsd.org (Postfix) with ESMTP id 6D2F837B42C for ; Wed, 23 May 2001 05:37:10 -0700 (PDT) (envelope-from brandon@vv.com) Received: from brandon by scooby.netsville.com with local (Exim 3.22 #1 (Debian)) id 152XsX-0005UT-00; Wed, 23 May 2001 08:36:41 -0400 Date: Wed, 23 May 2001 08:36:41 -0400 From: Micah Brandon To: Dan Graaff Cc: Robert Clark , Olivier Nicole , veldy@veldy.net, glassfish@frogbox.dyndns.org, freebsd-security@FreeBSD.ORG Subject: Re: Qmail + FreeBSD 4.3 -- resolved Message-ID: <20010523083641.C21004@vv.com> References: <20010522193427.A20063@darkstar.gte.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.3.17i In-Reply-To: ; from subscribed@de-net.org on Tue, May 22, 2001 at 11:53:31PM -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org * Dan Graaff (subscribed@de-net.org) [010523 02:56]: > Thanks for the advice everyone, but it looks like the problem just recently > came out on the vpopmail site! (today infact)... http://inter7.com/vpopmail/ > They completely re-wrote vdelivermail.. but i think im going to wait for a > stable release.. just deal with pages of vdelivermail exit 11's I just jumped on this list and I don't know if this was covered but I had this EXACT same problem and the reason was there was the .qmail-default forwarding file which looked something like this: | /usr/local/vpopmail/bin/vdelivermail '' /usr/local/vpopmail/domains// Problem was, it pointed to a local "" that did not exist! So, I highly doubt someone is attacking your machine. Sure, this was some kind of bug in vdelivermail as it shouldn't have died like that. They've probably corrected this in the newest version. I'd check all your .qmail-default's (or any other .qmail files) that may be misdirected as such. You might be able to tell which is fouled up by associating the exit 11 with a previous delivery attempt line in your maillog file. -- Micah Brandon brandon@vv.com Netsville, Inc. http://www.netsville.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message