Re: [cobalt-security] Sendmail issues

[Jan Tietze <jptietze@xxxxxxxxxxx>]

Clients connecting to a server to check for their mail do not usually use SMTP
to do this... you would see in.qpopper processes for this. No, this looks like
multiple concurrently incoming messages from other mail servers. As to whether
this is normal, it usually is.

Check your maillog to see if you are being abused as an open relay, the peak
number of sendmail processes by itself is nothing to worry.

Jimmy Gross wrote:

> I believe these are clients connecting to your server to check for their
> mail, not relaying.
>
> jimmy
>
> -----Original Message-----
> From: cobalt-security-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of Sean
> Bierdrager
> Sent: Thursday, July 27, 2000 10:10 PM
> To: cobalt-security@xxxxxxxxxxxxxxx
> Subject: [cobalt-security] Sendmail issues
>
> Forgive me for asking newbie questions... but I get this as processes of
> sendmail so I just want to know, is this normal?  FYI I allow none to use
> our site as a SMTP relay.
>
> 855  ?  S    0:00 sendmail: server [203.144.251.67] child wait
>   890  ?  S    0:00 sendmail: server [203.155.32.22] child wait
>   894  ?  S    0:00 sendmail: LAA00894 [203.155.32.22]: DATA
>  1111  ?  S    0:01 sendmail: MAA01111 mail.ubctv.com.: client DATA 354
>  1113  ?  S    0:00 sendmail: MAA01113 [203.144.251.67]: DATA
>
> Thanks for any advice! If this is wrong though, how do I completely close of
> our server as an SMTP relay?