RE: [cobalt-security] Should I worry

["Mark Carey" <mark.carey@xxxxxxx>]

Hello all,

This is active monitor checking to make sure that sendmail is still
running.  Notice that it happens approximately every 15 minutes.
Something else important to notice is that it's coming from localhost.  

	Hope this helps,
	Mark.


-----Original Message-----
From: cobalt-security-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx] On Behalf Of njd 76
Sent: Wednesday, December 12, 2001 10:10 AM
To: cobalt-security@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-security] Should I worry



This has to be a problem. I have a RAQ4i and recieve the same problem
when i 
run logcheck.

Dec 12 07:45:02 cobalt342 sendmail[6552]: NOQUEUE: localhost [127.0.0.1]
did 
not issue MAIL/EXPN/VRFY/ETRN during connection to MTA

Anyone know what it means?

>From: "Audric Leperdi" <aleperdi@xxxxxxxxxxxxx>
>Reply-To: cobalt-security@xxxxxxxxxxxxxxx
>To: <cobalt-security@xxxxxxxxxxxxxxx>
>Subject: [cobalt-security] Should I worry
>Date: Wed, 12 Dec 2001 10:32:10 +0100
>
>During the last few days I got hundreds of these:
>
>Dec 12 09:04:08 qube3 sendmail[20950]: NOQUEUE: mrh.rcmail.com
>[216.54.1.19] did not issue MAIL/EXPN/VRFY/ETRN during connection to
MTA
>
>should I worry.
>
>Meanwhile I changed the default rule of my firewall from accept to 
>deny.
>
>Audric
>




_________________________________________________________________
Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp.

_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security