Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 28 Sep 2002 09:35:39 -0800 (AKDT)
From:      Mike Tibor <tibor@tibor.org>
To:        Heywood Jblome <provencial1@yahoo.com>
Cc:        freebsd-stable@freebsd.org
Subject:   Re: Possible trojan since upgrade
Message-ID:  <20020928093120.N23987-100000@xena.mikey.net>
In-Reply-To: <20020928035657.21042.qmail@web21402.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 27 Sep 2002, Heywood Jblome wrote:

> -----------This is the entry in question--------
> Sep 27 13:44:40 medusa sm-mta[1742]: g8RIiXgt001742:
> from=<root@zzzzzz.com>, size=0, class=0, nrcpts=1,
> proto=ESMTP, daemon=MTA, relay=[202.80.192.29]

Could this just be someone doing the following:

 telnet mx1.zzzzzz.com 25
 helo blah
 mail from: <root@zzzzzz.com>
 quit

I don't really know what that would accomplish, but I've seen stranger
things.  I have no idea why the system would slow at all--I assume top
(and others) don't show anything unusual?

Mike


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020928093120.N23987-100000>