[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-security] Should I worry
- Subject: RE: [cobalt-security] Should I worry
- From: Graeme Fowler <graeme.fowler@xxxxxxxxxxxxxx>
- Date: Wed, 12 Dec 2001 15:32:49 -0000
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Audric wrote:
> During the last few days I got hundreds of these:
>
> Dec 12 09:04:08 qube3 sendmail[20950]: NOQUEUE:
> mrh.rcmail.com [216.54.1.19] did not issue
> MAIL/EXPN/VRFY/ETRN during connection to MTA
>
> should I worry.
Not necessarily, unless it gets to the point where it starts to fill up your
disk partition.
What that message usually indicates is a NULL sendmail connection, ie. the
remote (see below) host connected to port 25 and initiated the connection
but did not then send any further data; or it opened the connection, issued
EHLO/HELO and then didn't send any further data.
This can be symptomatic of a few things, the most common (in my experience)
is an overloaded or badly configured remote server.
I would contact the remote server admins, personally, and discuss it with
them first. It's not a security issue.
Graeme
--
Graeme Fowler
System Administrator
Host Europe Group PLC