Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Nov 1998 11:55:15 -0500
From:      Gary Schrock <root@eyelab.psy.msu.edu>
To:        <mgrommet@insolwwb.net>, <freebsd-current@FreeBSD.ORG>
Subject:   Re: hm... what exactly does this mean in my nighty security output?
Message-ID:  <4.1.19981123115103.00a360d0@eyelab.msu.edu>
In-Reply-To: <A199D70FC96DD211AD1000609767926103597C@ISIMAIL>

next in thread | previous in thread | raw e-mail | index | archive | help
At 10:47 AM 11/23/98 -0600, mike grommet wrote:
>What are these exactly?  Folks who tried to use me as a relay?
>Interesting because the insolwwb.net domain is my own...

>Checking for rejected mail hosts:
>   5 inet-direct.com
>   1 tampabay.rr.com
>   1 southerncast.com
>   1 insolwwb.net

>From what I've seen, the addresses that get logged are the addresses the
mail was getting sent *to*, which personally I don't find as usefull as if
it would log the addresses that it was coming from.  Unfortunately, from
what I can tell, if sendmail is rejecting the mail for whatever reason, the
only address logged is the recipient (well, it also logs a relay, but you
don't get a senders address).  Only real way to tell what the rejection was
for and where it came from is to grep through the mail log for reject.


Gary Schrock
root@eyelab.msu.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.1.19981123115103.00a360d0>