From owner-freebsd-security Tue Sep 21 12:19:55 1999 Delivered-To: freebsd-security@freebsd.org Received: from gatekeeper.veriohosting.com (gatekeeper.veriohosting.com [192.41.0.2]) by hub.freebsd.org (Postfix) with ESMTP id 07F9514BC5 for ; Tue, 21 Sep 1999 12:19:50 -0700 (PDT) (envelope-from hart@iserver.com) Received: by gatekeeper.veriohosting.com; Tue, 21 Sep 1999 13:19:48 -0600 (MDT) Received: from unknown(192.168.1.109) by gatekeeper.veriohosting.com via smap (V3.1.1) id xma029419; Tue, 21 Sep 99 13:19:42 -0600 Received: (hart@localhost) by anchovy.orem.iserver.com (8.9.3) id NAA11256; Tue, 21 Sep 1999 13:18:12 -0600 (MDT) Date: Tue, 21 Sep 1999 13:18:12 -0600 (MDT) From: Paul Hart X-Sender: hart@anchovy.orem.iserver.com To: Joe Gleason Cc: "Mr. K." , security@FreeBSD.ORG Subject: Re: hackers? In-Reply-To: <001501bf0462$94adfdc0$256b52c6@tasam.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, 21 Sep 1999, Joe Gleason wrote: > I would suspect spaming through your system. I wouldn't suspect any relaying currently happening, especially if you've upgraded to sendmail 8.9.x and (presumably) updated your sendmail.cf file. You're probably experiencing the backlash from the initial relaying in the form of bouncing messages, refused messages, etc. The large-scale relay abuses that I've witnessed have almost always seemed to generate significant machine loads in the resulting aftermath. I don't know if this is characteristic or not, but the quality of some spammer address lists seems to be about 50% bad addresses (or worse). You may have to turn off sendmail (if possible) for a while until the backlash blows over. Paul Hart -- Paul Robert Hart ><8> ><8> ><8> Verio Web Hosting, Inc. hart@iserver.com ><8> ><8> ><8> http://www.iserver.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message