From owner-freebsd-questions@FreeBSD.ORG Fri May 27 04:25:22 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9A4B0106564A for ; Fri, 27 May 2011 04:25:22 +0000 (UTC) (envelope-from rsimmons0@gmail.com) Received: from mail-yx0-f182.google.com (mail-yx0-f182.google.com [209.85.213.182]) by mx1.freebsd.org (Postfix) with ESMTP id 58B898FC0A for ; Fri, 27 May 2011 04:25:22 +0000 (UTC) Received: by yxl31 with SMTP id 31so735557yxl.13 for ; Thu, 26 May 2011 21:25:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=6LXl0x3f3Kfs17eKQXMjDAhpJTWzHoxcwyDFx06JhuU=; b=u6odN5wa1bMN/gWpaNWyiQjFxyJaGdyBWo0u4Nwmtmtnemj4+ZN55nPNpJoFTAckvQ 7LnloZV26mXoX61d+D1EDxAvFGzgDrOhsBBRBrDIXTHDP4f0YGXQPG1Z37g731tjIu3w 2d9L6ela56g6o5JEOHBxa2X0L/Wc/72rwdxmA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=gPSJzNxIRmAecDJJ0LgI8Qiq2h/xspOStJZN3vurSlWGFQH2FZgcblCRCp3lRB6wxG 57bYnAV89qHORlcDC3aS7YFyuXASuqUou5f4/GDIygZQJLrE90l5tx83CnasVDwCK36u ymI/ectFPWJjOoFVH4erHsBc1l7dnAvvZ/ejM= MIME-Version: 1.0 Received: by 10.101.205.22 with SMTP id h22mr1224981anq.14.1306470321622; Thu, 26 May 2011 21:25:21 -0700 (PDT) Received: by 10.100.131.9 with HTTP; Thu, 26 May 2011 21:25:21 -0700 (PDT) In-Reply-To: <3389314668-258946399@intranet.com.mx> References: <3389310281-258946398@intranet.com.mx> <4DDF2366.4010100@esiee.fr> <3389314668-258946399@intranet.com.mx> Date: Fri, 27 May 2011 00:25:21 -0400 Message-ID: From: Robert Simmons To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Subject: Re: Disable or limit email in root? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 May 2011 04:25:22 -0000 On Fri, May 27, 2011 at 12:16 AM, Jorge Biquez wrote: > I am trying to find if sendmail was the problem or what... thing is not that > root receive email but that root was used to send email to a list of > address... Was the root account on the box actually used, or did someone spoof email coming from root on the box? Did you receive a spam report about email coming from the IP address of the box? Do you have the header of the email/s in question? Is sendmail running locally, or is it running SMTP on an open port?