From owner-freebsd-isp Thu May 20 7:59: 0 1999 Delivered-To: freebsd-isp@freebsd.org Received: from runner.jjsoft.com (jahanur.intur.net [206.97.149.64]) by hub.freebsd.org (Postfix) with ESMTP id BAA48150AF for ; Thu, 20 May 1999 07:58:50 -0700 (PDT) (envelope-from jahanur@jjsoft.com) Received: from jjsoft.com ([206.97.159.66]) by runner.jjsoft.com (8.9.0/8.9.0) with ESMTP id JAA25656 for ; Thu, 20 May 1999 09:58:46 -0500 (CDT) Message-ID: <374423FC.65A774B1@jjsoft.com> Date: Thu, 20 May 1999 10:02:21 -0500 From: Jahanur R Subedar Organization: J & J Software Solutions,www.jjsoft.com X-Mailer: Mozilla 4.5 [en] (Win95; I) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-isp@freebsd.org Subject: 911 sombody using our sendmail server. Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org HI, I need some help ver fast to catche a hacker. Here is the signature. bash-2.01$ ps -ax | grep sendmail 121 ?? Is 0:03.00 sendmail: accepting connections on port 25 (sendmail. 25508 ?? I 0:00.02 sendmail: server bnetnt1.buz.net [204.216.44.4] child 25509 ?? S 0:03.43 sendmail: JAA25509 bnetnt1.buz.net [204.216.44.4]: DA I need to know how can I catche this person and ban him. Please help me. Or what more do I need for evidence. Jahanur To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message