> -----Original Message-----
> From: Carrie Bartkowiak [mailto:[EMAIL PROTECTED]]
> Sent: 23 May 2001 20:37
Sorry, this is a bit speculative but...
> root 27837 0.0 1.1 2636 1448 ? S 14:15 0:00
> sendmail: q4/f4NA8a102794 mail.elvisisthebomb.com.: user open
I've seen that--------------^^^^^^^^^^^^^^^^^^^^^^^^
somewhere before, and not for good reasons. Would suggest you check your
host for signs of a root kit or a mail relay.... or before all that, look in
the mailqueue and see what the email is about :)
<snip>
--
Nick Drage - Security Architecture - Demon Internet - Thus PLC
As of Thu 24/05/2001 at 9:00
This computer has been up for 26 days, 15 hours, 13 minutes, 18 seconds.
_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security
