Hi,
The <> messages are bounced messages. Someone may be spammed from your
server and those address falied is bouncing back now. Make sure your
server is secure and no one abusing it. Check for malicious scripts ...(
expecially in /tmp..)...
Have a nice hunting:-)
Jessica Zhu wrote:
Hi,
It looks like we are experiencing the mail attack now.
In our maillog, we have a lot of User Unknown message like the following.
Aug 23 11:52:25 s1 sendmail[2110]: j7NFqPL02110:
<Oscard@xxxxxxxxxxxxx>... User unknown
Aug 23 11:52:25 s1 sendmail[2110]: j7NFqPL02110: from=<>,
size=17601, class=0, nrcpts=0, proto=ESMTP, daemon=MTA,
relay=mail.vis-inc.net [66.77.28.202]
It looks like that all the from is <>, does anyone have the way to fight
against it.
Jessica
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list