[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-security] security violation: sendmail: rejecting connections on daemon MTA
- Subject: RE: [cobalt-security] security violation: sendmail: rejecting connections on daemon MTA
- From: "Graeme Fowler" <graeme.fowler@xxxxxxxxxxxxxx>
- Date: Tue, 7 May 2002 11:36:56 +0100
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Howdy
> May 6 13:04:33 qube3 sendmail[1355]: rejecting connections
> on daemon MTA: load average: 21
<snip>
> Should I worry? What else could I check to see if that was something
> internal (antivirus activity) or something external (someone hacking).
Other than the fact that at 1304, your Qube3 had a load average of 21, probably not.
Sendmail is configurable to drop connections when the load average is greater than a certain value, which is what you're seeing here. Now you have to find exactly what's causing that load.
You probably have a cron job somewhere, doing log crunching for example. Other than that I wouldn't worry, particularly.
Graeme
--
Graeme Fowler
System Administrator
Host Europe Group PLC