From owner-freebsd-questions Sat Nov 23 5:58:10 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9608837B401 for ; Sat, 23 Nov 2002 05:58:08 -0800 (PST) Received: from fat_man.ascendency.net (12-250-130-72.client.attbi.com [12.250.130.72]) by mx1.FreeBSD.org (Postfix) with ESMTP id A11B943EA9 for ; Sat, 23 Nov 2002 05:58:07 -0800 (PST) (envelope-from mike@ascendency.net) Received: from mike (adsl-65-42-84-83.dsl.chcgil.ameritech.net [65.42.84.83]) (authenticated) by fat_man.ascendency.net (8.11.6/8.11.6) with ESMTP id gANDv9g74339; Sat, 23 Nov 2002 07:57:09 -0600 (CST) (envelope-from mike@ascendency.net) Reply-To: From: "Mike Loiterman" To: "'Ceri Davies'" Cc: Subject: RE: Strange Group Diffs Date: Sat, 23 Nov 2002 07:54:50 -0600 Message-ID: <003001c292f7$e82017f0$0302a8c0@mike> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.4024 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 In-Reply-To: <20021123134916.GA9051@submonkey.net> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I also notice the following in daily mail report Checking for rejected mail hosts: 1 docserver.cac.washington.edu and in daily security report: about 50 or 60 > swap_pager_getswapspace: failed > swap_pager_getswapspace: failed > swap_pager_getswapspace: failed > pid 2773 (httpd), uid 80, was killed: out of swap space > Nov 22 07:55:06 fat_man /kernel: pid 2773 (httpd), uid 80, was > killed: out of swap space Nov 22 13:18:38 fat_man su: mike to root > on > /dev/ttyp0 > swap_pager_getswapspace: failed and then about 20 or 30 more of the above I did the su to root at 13:18. I'm sure of that. I killed apache this moring as well as all the stray httpd processes and restarted the server without any problems. ........................................... Randomly Generated Quote: If you make people think they are thinking, they'll love you; but if you really make them think, they'll hate you. --Don Marquis Mike Loiterman PGP Key 0xD1B9D18E http://www.ascendency.net > -----Original Message----- > From: Ceri Davies [mailto:setantae@submonkey.net] > Sent: Saturday, November 23, 2002 7:49 AM > To: Mike Loiterman > Cc: freebsd-questions@FreeBSD.ORG > Subject: Re: Strange Group Diffs > > On Sat, Nov 23, 2002 at 07:43:04AM -0600, Mike Loiterman wrote: > > > > fat_man.ascendency.net group diffs: > > 16a17 > > > cyrus:*:60:daemon > > 30d30 > > < cyrus:*:60:daemon > > Somebody moved that entry from line 16 to line 30 of /etc/group. > > > I'm concerned because I'm using SMTP-AUTH (via cyrus). Is > > someone messing with my mailserver? > > If you didn't do this, it's a possibility. > If you've sysinstall or similar to reconfigure your system lately, > then it's *possible* that this was done automatically. > > Ceri > -- > The vengeance of the All-Father brings your last day! -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.4 Comment: Message digitally signed by Mike Loiterman iQA/AwUBPd+IqWjZbUnRudGOEQIQcACg5uLkhtWPUPmvbZWIn4oJnkQYDisAoLE8 e4Viyo9nOmXRTxn87ym11Kuv =ulm6 -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message