From owner-freebsd-security Wed Jul 17 12:14:35 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9FFCB37B400 for ; Wed, 17 Jul 2002 12:14:32 -0700 (PDT) Received: from kobold.compt.com (TBextgw.compt.com [209.115.146.18]) by mx1.FreeBSD.org (Postfix) with ESMTP id E476743E91 for ; Wed, 17 Jul 2002 12:14:31 -0700 (PDT) (envelope-from klaus@kobold.compt.com) Date: Wed, 17 Jul 2002 15:14:29 -0400 From: Klaus Steden To: freebsd-security@FreeBSD.ORG Subject: Weird messages reported by kernel ... Message-ID: <20020717151429.J48097@cthulu.compt.com> References: <20020711170957.U318-100000@gabba.so.cpt1.za.uu.net> <20020711153708.GF25321@straylight.oblivion.bg> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20020711153708.GF25321@straylight.oblivion.bg>; from roam@ringlet.net on Thu, Jul 11, 2002 at 06:37:08PM +0300 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi there, I've noticed a couple of messages show up in my daily reports from our DMZ mail server that I can't explain, and I'm wondering if they indicate some attempted exploit. Specifically ... Jul 16 18:52:36 cthulu sendmail[1067]: g6GMqah01067: SYSERR: putoutmsg (CPE014140013297.cpe.net.cable.rogers.com): error on output channel sending "500 5.5.1 Command unrecognized: "Content-Type: text/html;"": Broken pipe Jul 16 21:56:21 cthulu sendmail[3984]: g6H1uLh03984: SYSERR: putoutmsg (adsl-66-124-102-179.dsl.mtry01.pacbell.net): error on output channel sending "500 5.5.1 Command unrecognized: "Content-Type: text/html;"": Broken pipe Anyone seen this before? Anyone have an inkling as to what it is, besides someone not understanding SMTP? cheers, Klaus To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message