Re: [cobalt-security] Sendmail issues

[Gossi The Dog <gossi@xxxxxxxxxxxxxx>]

Hi,

To read the log from telnet, do something like:

- telnet in
- 'su' (fllowed by root password when prompted)
- cd /var/log
- more maillog
- or tail -200 maillog to view the last 200 lines.

Regards.

On Fri, 28 Jul 2000, Frank Cubillos wrote:

> I tried ftp'ing into var/log/maillog but get an access denied error, any
> ideas? Can I download log via telnet? Thanks I think it's an important log
> to keep an eye on.
> TIA
> Frank
> ----- Original Message -----
> From: "Jan Tietze" <jptietze@xxxxxxxxxxx>
> To: <cobalt-security@xxxxxxxxxxxxxxx>
> Sent: Friday, July 28, 2000 8:05 AM
> Subject: Re: [cobalt-security] Sendmail issues
> > Clients connecting to a server to check for their mail do not usually use
> SMTP
> > to do this... you would see in.qpopper processes for this. No, this looks
> like
> > multiple concurrently incoming messages from other mail servers. As to
> whether
> > this is normal, it usually is.
> > Check your maillog to see if you are being abused as an open relay, the
> peak
> > number of sendmail processes by itself is nothing to worry.
>  Jimmy Gross wrote:
>  I believe these are clients connecting to your server to check for their
> mail, not relaying.
> > > jimmy
> 
> 
> 
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
> 

-- 
gossi@xxxxxxxxxxxxxxx