From owner-freebsd-questions Mon Apr 8 16:44:19 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id QAA13086 for questions-outgoing; Mon, 8 Apr 1996 16:44:19 -0700 (PDT) Received: from phaeton.artisoft.com (phaeton.Artisoft.COM [198.17.250.211]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id QAA13081 for ; Mon, 8 Apr 1996 16:44:17 -0700 (PDT) Received: (from terry@localhost) by phaeton.artisoft.com (8.6.11/8.6.9) id QAA03456; Mon, 8 Apr 1996 16:37:36 -0700 From: Terry Lambert Message-Id: <199604082337.QAA03456@phaeton.artisoft.com> Subject: Re: mystery phone call To: brian@filoli.com (Brian Queen) Date: Mon, 8 Apr 1996 16:37:35 -0700 (MST) Cc: questions@FreeBSD.org In-Reply-To: from "Brian Queen" at Apr 8, 96 02:25:40 pm X-Mailer: ELM [version 2.4 PL24] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-questions@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk > In the middle of the night last night my machine made a call to > somewhere, and I even heard the hard drive churning. > > Is there a log file I can check to see what was going on? A security audit is run nightly (makes for a bad machine for a bedroom). It can be disabled by modifying /etc/daily. The log should be in the root mailbox. Login as root and run mail. I'd be surprised if it made a call. If you have a service provider, then when it went to do the name lookup, if you have your network configured incorrectly, it could have been sendmail firing the phone call off to talk to your nameserver. Terry Lambert terry@lambert.org --- Any opinions in this posting are my own and not those of my present or previous employers.