From owner-freebsd-questions@FreeBSD.ORG Fri May 20 15:41:37 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BF8B516A4E8 for ; Fri, 20 May 2005 15:41:37 +0000 (GMT) Received: from mail.courtesymortgage.com (dsl093-037-194.snd1.dsl.speakeasy.net [66.93.37.194]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5B5D143D9F for ; Fri, 20 May 2005 15:41:35 +0000 (GMT) (envelope-from jwilliams@courtesymortgage.com) Received: from corpmail.courtesymortgage.com (corpmail.courtesymortgage.com [192.168.1.165])j4KFf5hw074780 for ; Fri, 20 May 2005 08:41:05 -0700 (PDT) (envelope-from jwilliams@courtesymortgage.com) Received: from [192.168.1.90] ([192.168.1.90])j4KFd23x055340 for ; Fri, 20 May 2005 08:39:02 -0700 (PDT) (envelope-from jwilliams@courtesymortgage.com) Message-ID: <428E054B.2020903@courtesymortgage.com> Date: Fri, 20 May 2005 08:42:03 -0700 From: Jason Williams User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-CourtesyMortgage-MailScanner-Information: Please contact the ISP for more information X-CourtesyMortgage-MailScanner: Found to be clean X-MailScanner-From: jwilliams@courtesymortgage.com Subject: Odd Messages showing up in /var/log/messages X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 May 2005 15:41:37 -0000 Hello everyone. Just recently, some very odd messages started showing up in my /var/log/messages on a FreeBSD 4.9 MailGateway box.This box serves as our primary email scrubber, removing viruses and quarnatining spam. It has worked flawlessly for over a year. This messages started popping up just this week. Here is a few snips: May 20 08:22:27 mail jwilliams: Process did not exit cleanly, returned 255 with signal 0 May 20 08:22:38 mail jwilliams: Process did not exit cleanly, returned 255 with signal 0 May 20 08:23:44 mail jwilliams: Process did not exit cleanly, returned 255 with signal 0 May 20 08:26:45 mail jwilliams: Process did not exit cleanly, returned 255 with signal 0 May 20 08:31:50 mail jwilliams: Process did not exit cleanly, returned 9 with signal 0 May 20 08:34:39 mail jwilliams: Process did not exit cleanly, returned 9 with signal 0 May 20 08:35:01 mail jwilliams: Process did not exit cleanly, returned 255 with signal 0 May 20 08:37:37 mail jwilliams: Process did not exit cleanly, returned 255 with signal 0 Just to be sure, I ran chkrootkit as well as rootkithunter on the boxes, just to check. They both came back negative for any infections or foul play. But, I am still concerned about these messages and would like to know what they are and what is causing them. It would make me feel better. Anyone have any recommendations on where to start? I'm a little baffled at this moment. I appreciate it. Jason