Date: Thu, 20 May 1999 08:10:46 -0700 From: Erin Fortenberry <erinf@lusardi.com> To: 'Jahanur R Subedar' <jahanur@jjsoft.com>, freebsd-isp@freebsd.org Subject: RE: 911 sombody using our sendmail server. Message-ID: <AFB0749029D0D211AD3900902728125103A83D@MAIL>
next in thread | raw e-mail | index | archive | help
What version of sendmail? Does this person have an account on this system? I'd say first, block his access to your system with the firewall rules, then work out your sendmail problems. Get ahold of the people at bux.net: http://www.networksolutions.com/cgi-bin/whois/whois/?STRING=buz.net and tell them what is going on. Normally the IPS are good about helping with this kind of thing. Erin mailto:kahn@unet.tm http://www.fortenberry.net "Can i dial 1-255-255-255255 and make every phone in the world ring?" -- Tanuki -----Original Message----- From: Jahanur R Subedar [mailto:jahanur@jjsoft.com] Sent: Thursday, May 20, 1999 8:02 AM To: freebsd-isp@freebsd.org Subject: 911 sombody using our sendmail server. HI, I need some help ver fast to catche a hacker. Here is the signature. bash-2.01$ ps -ax | grep sendmail 121 ?? Is 0:03.00 sendmail: accepting connections on port 25 (sendmail. 25508 ?? I 0:00.02 sendmail: server bnetnt1.buz.net [204.216.44.4] child 25509 ?? S 0:03.43 sendmail: JAA25509 bnetnt1.buz.net [204.216.44.4]: DA I need to know how can I catche this person and ban him. Please help me. Or what more do I need for evidence. Jahanur To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AFB0749029D0D211AD3900902728125103A83D>