Re: Someone is probing me thru sendmail?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thursday 29 January 2004 07:28, Reuben D. Budiardja wrote:
> Hi all,
> I'm wondering if someone can help me interpret this. I got lots of
> this in my maillog:
> ..
> 1958:Jan 27 05:52:03 voyager sendmail[13700]: i0RAq3413700:
> <peter@xxxxxxxxxxxxxxxxxxxx>... User unknown
>
> and (sometimes) correspondingly in the next line the following also
> exist:
>
> jan 27 05:36:58 voyager sendmail[13585]: i0RAaw413585: lost input
> channel from adsl-66-73-195-63.dsl.chcgil.ameritech.net
>
> What is the "lost input channel" mean? Does this mean someone try
> to probe what user exists on my server? should I be worried?
>
 
The explanation I've seen is that the remote side just drops the 
connection when after issued the error message "User unknown" rather 
than issue the "QUIT" instruction to shut down the connection 
gracefully. Spammers do this all the time in order to save time; drop 
the connecton and move on to the next victim.

Regards,  Mike Klinke


-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux