[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cobalt-users
Subject:    [cobalt-users] Re: [cobalt-security] Spam Users
From:       "bob" <bob () webline ! be>
Date:       2002-08-31 22:57:23
[Download RAW message or body]


Sorry, but NO  pop b4 smtp in this link for raq4
Where can I find it ?

bob



Hi Andres

Install "POP before SMTP".

find your patches here: http://sunsolve.sun.com/patches/cobalt/

if you have it installed you might need to patch read this: 

"POPRelayD Relay Authentication Vulnerability"
http://us.cns911.com/holes/otherapp/otherapp01071002.php

@lfa

*********** REPLY SEPARATOR  ***********

Once upon a time  31.08.2002 at 11:30 Andres C. scribbled:

>I got some probmlem on one of my cobalts
>When y do a ps x | grep sendmail, they show me a lots of users conected

>and sending mail from my own server like u could see below.
>
>How can i stop this use from remote users?
>Doing the same in another raq, this not happen'
>
>
>[root admin]# ps x | grep sendmail
>21965 ?        S      0:13 sendmail: accepting connections
>21968 ?        S      0:00 /usr/sbin/sendmail -q15m
>24826 ?        S      0:00 sendmail: q1/g7R2MFZ11795 uctem.cl.: user
open
>13760 ?        S      0:00 sendmail: q1/g7QN3n028095 compugraph.com.:
user
>open
>18055 ?        S      0:00 sendmail: q1/g7QKpE015291 nomail.o0o.net.:
user
>open
>18728 ?        S      0:00 sendmail: q1/g7QN3a028055 bedfordnet.com.:
user
>open
>19519 ?        S      0:00 sendmail: q1/g7SAhRr03928 neunet.com.: user
open
>22239 ?        S      0:00 sendmail: q1/g7QLh9020253 mail.cwi.net.:
user
>open
>23134 ?        S      0:00 sendmail: q1/g7QM7v022467 mail.cwi.net.:
user
>open
>24066 ?        S      0:00 sendmail: q1/g7QDv0012340 bedfordnet.com.:
user
>open
>24863 ?        S      0:00 sendmail: q1/g7QD0P007842 10.0.0.1.: user
open
>25637 ?        S      0:00 sendmail: q1/g7QD9W008548 bedfordnet.com.:
user
>open
>26493 ?        S      0:00 sendmail: q1/g7QDKm009457 mail.cwi.net.:
user
>open
>27293 ?        S      0:00 sendmail: q3/g7S1Zb924974 chilesite.com.:
user
>open
>28218 ?        S      0:00 sendmail: q1/g7REkc027549 bbs.pinos.com.:
user
>open
>29378 ?        S      0:00 sendmail: q1/g7SJcir22287
>mta2-mail.england.com.:
>use
>30690 ?        S      0:00 sendmail: q1/g7SJV9r21587
>mta2-mail.england.com.:
>use
>31810 ?        S      0:00 sendmail: q1/g7V2dFZ14954
>mail.eroticmailcenter.com.:
>31811 ?        S      0:00 sendmail: q2/g7V6d6G29464
>smtp.sbs-promotion.co.jp.:
>32483 pts/1    S      0:00 grep sendmail
>
>
>_______________________________________________
>cobalt-security mailing list
>cobalt-security@list.cobalt.com 
>http://list.cobalt.com/mailman/listinfo/cobalt-security





--__--__--

_______________________________________________
cobalt-security mailing list
cobalt-security@list.cobalt.com
http://list.cobalt.com/mailman/listinfo/cobalt-security


End of cobalt-security Digest

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.384 / Virus Database: 216 - Release Date: 21/08/2002
 

_____________________________________
cobalt-users mailing list
cobalt-users@list.cobalt.com
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users
[prev in list] [next in list] [prev in thread] [next in thread]