|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: [suse-security] New logging message
From: Matt Gibson (gothick
gothick.org.uk)
Date: Tue Apr 29 2003 - 02:57:43 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
On Tuesday 29 Apr 2003 07:30, Matthias Riese wrote:
> Apr 29 05:01:49 p15089763 server [218.79.178.192] cmd read[19922]:
> NOQUEUE: [218.79.178.192] did not issue MAIL/EXPN/VRFY/ETRN during
> connection to MTA
>
> They repeat 110 times within 13 minutes.
>
> What triggered these logging messages?
Someone's connecting to your incoming SMTP port, but not actually using it to
deliver mail, which is obviously a tad suspicious. I'm guessing someone's
seeing if they can use one of the many (hopefully now patched) sendmail
exploits.
M
--
"It's the small gaps between the rain that count,
and learning how to live amongst them."
-- Jeff Noon
--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@suse.com
Security-related bug reports go to security@suse.de, not here
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]