Date: 17 Mar 2001 17:21:11 +0100 From: Dag-Erling Smorgrav <des@ofug.org> To: Per Christian Henden <perchrh@stud.math.ntnu.no> Cc: <freebsd-security@FreeBSD.ORG> Subject: Re: weird error messages (at least I don't understand them) Message-ID: <xzphf0scqo8.fsf@flood.ping.uio.no> In-Reply-To: Per Christian Henden's message of "Fri, 16 Mar 2001 10:34:41 %2B0100 (MET)" References: <Pine.GSO.4.33.0103161022470.28592-100000@lastebil.math.ntnu.no>
next in thread | previous in thread | raw e-mail | index | archive | help
Per Christian Henden <perchrh@stud.math.ntnu.no> writes: > These entries (or something similar) also appears fairly frequently > (I replaced my real dns-name with "my.hostname.domain") > > Checking for rejected mail hosts: > 5 malvix.hist.no > 2 my.hostname.domain > 2 malvix.hist.no@my.hostname.domain > 1 <malvix.hist.no!kan2na > 1 <kan2na@ > 1 <kan2na%malvix.hist.no > 1 <kan2na > 1 <@myhostname.domain:kan2na@malvix.hist.no > > This looks kinda suspicous to me, what could it mean? It means malvix.hist.no is looking for an open relay to spam through. If I were you, I'd check /var/log/maillog* for occurrences of 'malvix', and send those to abuse@hist.no (or ask the admins at NTNU if they know who's in charge of HIST) DES -- Dag-Erling Smorgrav - des@ofug.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzphf0scqo8.fsf>