Hi everybody.
Got some strange alerts in my logfiles that I need help to interp.

<snip>
Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Jan 27 02:12:41 odin sendmail[46386]: i0R1CbKR046385: Fixed MIME 
Content-Type header field (possible attack)
Jan 27 02:12:41 odin sendmail[46386]: i0R1CbKR046385: Fixed MIME 
Content-Type header field (possible attack)

Security Violations
=-=-=-=-=-=-=-=-=-=
Jan 27 02:12:41 odin sendmail[46386]: i0R1CbKR046385: Fixed MIME 
Content-Type header field (possible attack)
Jan 27 02:12:41 odin sendmail[46386]: i0R1CbKR046385: Fixed MIME 
Content-Type header field (possible attack)

Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Jan 27 02:12:41 odin sendmail[46386]: i0R1CbKR046385: Fixed MIME 
Content-Type header field (possible attack)
Jan 27 02:12:41 odin sendmail[46386]: i0R1CbKR046385: Fixed MIME 
Content-Type header field (possible attack)
</snip>

and from my maillog

<snip>
cat maillog | grep "02:12:41"
Jan 27 02:12:41 odin sendmail[46385]: i0R1CbKR046385: 
from=<[EMAIL PROTECTED]>, size=122951, class=-30, 
nrcpts=1, msgid=<[EMAIL PROTECTED]>, 
proto=ESMTP, daemon=IPv4, relay=mx2.freebsd.org [216.136.204.119]
Jan 27 02:12:41 odin sendmail[46386]: i0R1CbKR046385: Fixed MIME 
Content-Type header field (possible attack)
Jan 27 02:12:41 odin sendmail[46386]: i0R1CbKR046385: 
to=<[EMAIL PROTECTED]>, delay=00:00:03, xdelay=00:00:00, 
mailer=local, pri=207193, relay=local, dsn=2.0.0, stat=Sent
</snip>

Nothing unusual in any other logfiles.

Regards
Hasse.

_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to