From owner-freebsd-security  Thu May  4 23:37:47 2000
Delivered-To: freebsd-security@freebsd.org
Received: from rover.village.org (rover.village.org [204.144.255.49])
	by hub.freebsd.org (Postfix) with ESMTP id 03CBF37B5AA
	for <freebsd-security@FreeBSD.ORG>; Thu,  4 May 2000 23:37:44 -0700 (PDT)
	(envelope-from imp@harmony.village.org)
Received: from harmony.village.org (harmony.village.org [10.0.0.6])
	by rover.village.org (8.9.3/8.9.3) with ESMTP id AAA28542;
	Fri, 5 May 2000 00:37:42 -0600 (MDT)
	(envelope-from imp@harmony.village.org)
Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.9.3/8.8.3) with ESMTP id AAA46998; Fri, 5 May 2000 00:37:38 -0600 (MDT)
Message-Id: <200005050637.AAA46998@harmony.village.org>
To: Jim Durham <durham@w2xo.pgh.pa.us>
Subject: Re: I got spammed from my localhost.. 
Cc: freebsd-security@FreeBSD.ORG
In-reply-to: Your message of "Thu, 04 May 2000 23:30:12 EDT."
		<39124044.EAB72303@w2xo.pgh.pa.us> 
References: <39124044.EAB72303@w2xo.pgh.pa.us>  
Date: Fri, 05 May 2000 00:37:38 -0600
From: Warner Losh <imp@village.org>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

In message <39124044.EAB72303@w2xo.pgh.pa.us> Jim Durham writes:
: I found that someone has been relaying through my sendmail all day
: long. He is appearing as "localhost" which is an allowable address
: to relay in my access database for sendmail.

Without a header, it is impossible to know if this is a localhost or a
localhost.  There are differences :-).  He might have is IP address
setup to return localhost for queries to it (reverse dns).

Help us out and send us at least one header.

Warner


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message