On Wed, Nov 15, 2006 at 03:41:01PM +0800, Mhac Janapin wrote: > I was annoyed by a sudden influx of UCE to our MailServer (SuSE 10.1 OSS, > Sendmail+Scalix 11 OE). After checking the logs, I was surprised to find out > that connections are coming from 127.0.0.1 (localhost) !? > > Could it be that our Mail Server is compromised? Any input welcome.
if fetchmail is used to feed mail into sendmail, 'localhost' is the last host in the header chain, maybe? -- _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List [email protected] (#PLUG @ irc.free.net.ph) Read the Guidelines: http://linux.org.ph/lists Searchable Archives: http://archives.free.net.ph
