Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 23 Nov 2002 07:54:50 -0600
From:      "Mike Loiterman" <mike@ascendency.net>
To:        "'Ceri Davies'" <setantae@submonkey.net>
Cc:        <freebsd-questions@FreeBSD.ORG>
Subject:   RE: Strange Group Diffs
Message-ID:  <003001c292f7$e82017f0$0302a8c0@mike>
In-Reply-To: <20021123134916.GA9051@submonkey.net>

next in thread | previous in thread | raw e-mail | index | archive | help
 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I also notice the following in daily mail report

Checking for rejected mail hosts:
   1 docserver.cac.washington.edu

and in daily security report:
about 50 or 60
> swap_pager_getswapspace: failed
<snip>
> swap_pager_getswapspace: failed
> swap_pager_getswapspace: failed
> pid 2773 (httpd), uid 80, was killed: out of swap space
> Nov 22 07:55:06 fat_man /kernel: pid 2773 (httpd), uid 80, was
> killed:  out of swap space Nov 22 13:18:38 fat_man su: mike to root
> on 
> /dev/ttyp0
> swap_pager_getswapspace: failed
and then about 20 or 30 more of the above

I did the su to root at 13:18.  I'm sure of that.  I killed apache
this moring as well as all the stray httpd processes and restarted
the server without any problems.


...........................................
Randomly Generated Quote:
If you make people think they are          
thinking, they'll love you; but if you     
really make them think, they'll hate       
you. --Don Marquis                         

Mike Loiterman
PGP Key 0xD1B9D18E
http://www.ascendency.net

> -----Original Message-----
> From: Ceri Davies [mailto:setantae@submonkey.net]
> Sent: Saturday, November 23, 2002 7:49 AM
> To: Mike Loiterman
> Cc: freebsd-questions@FreeBSD.ORG
> Subject: Re: Strange Group Diffs
> 
> On Sat, Nov 23, 2002 at 07:43:04AM -0600, Mike Loiterman wrote:
> >
> > fat_man.ascendency.net group diffs:
> > 16a17
> > > cyrus:*:60:daemon
> > 30d30
> > < cyrus:*:60:daemon
> 
> Somebody moved that entry from line 16 to line 30 of /etc/group.
> 
> > I'm concerned because I'm using SMTP-AUTH (via cyrus).  Is
> > someone messing with my mailserver?
> 
> If you didn't do this, it's a possibility.
> If you've sysinstall or similar to reconfigure your system lately,
> then it's *possible* that this was done automatically.
> 
> Ceri
> --
> The vengeance of the All-Father brings your last day!

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.4
Comment: Message digitally signed by Mike Loiterman

iQA/AwUBPd+IqWjZbUnRudGOEQIQcACg5uLkhtWPUPmvbZWIn4oJnkQYDisAoLE8
e4Viyo9nOmXRTxn87ym11Kuv
=ulm6
-----END PGP SIGNATURE-----


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?003001c292f7$e82017f0$0302a8c0>