Hello, Eduardo!
On Fri, 10 Sep 1999, Eduardo Soriano wrote:
>Since a couple of days /var/log/secure of our firewall is reporting some
>starnge messages like:
>Aug 25 03:07:34 www imapd[9092]: error: cannot execute /usr/sbin/imapd: No such
>file or directory
>Aug 25 03:07:39 www imapd[9093]: connect from dhcp9538066.columbus.rr.com
>Aug 25 03:07:39 www imapd[9093]: error: cannot execute /usr/sbin/imapd: No such
>file or directory
[ skipped ]
>Is someone having an idea about what are they trying to do on the other side
>and how can I obtain more detailed information ?
Probably, someone tried to check imapd vulnerability if you can be sure it was
one of your users trying to get his/her mail. And you have incorrect
/etc/inetd.conf file, you have to either comment imapd section in
/etc/inetd.conf out, correct path for imapd daemon in /etc/inetd.conf or
install imapd daemon if you need one.
Bye.
--
One difference between a man and a machine
is that a machine is quiet when well oiled.
--
With best of best regards, Pawel S. Veselov (aka Black Angel)
Web page : http://i.am/BlackAngel | ICQ UIN : 5252265
Internet e-mail : [EMAIL PROTECTED]
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
