Mark M. Barrios said: > eh? is this the basis you think your box was compromised? > > i dont see it :D
maybe he was referring to the "250 I got it darlin'" message. maybe he thought his mail server was the one that sent out that reply. actually it's the 65-57-173-98.smtp-in.mia.currentmail.com server that said that reply :) -andre > Jopoy C. Solano wrote: > >>Help!!! >> >>It seems my mail server was compromised :( >> >>/var/log/maillog says: >> >>Mar 10 08:37:00 mx2 postfix/nqmgr[760]: 5A16F2FD74: from=<>, size=3825, >>nrcpt=1 (queue active) >>Mar 10 08:37:13 mx2 postfix/smtp[1004]: 5A16F2FD74: >>to=<[EMAIL PROTECTED] >>tmail.com>, >>relay=65-57-173-98.smtp-in.mia.currentmail.com[65.57.173.98], delay=13, >>status=sent (250 I got it darlin'.) >> >>What do i do po? >> >>* I limited "mynetworks" to my local LAN before this happened >> >>TIA. >> >>'jopoy >> >> >>----------------------- >>University of Baguio >>General Luna Road >>Baguio City >>Philippines 2600 >>Phone: +63 74 4423540 >>Fax: +63 74 4423071 >>http://www.ubaguio.edu >> >> >>_ >>Philippine Linux Users Group. Web site and archives at >>http://plug.linux.org.ph To leave: send "unsubscribe" in the body to >>[EMAIL PROTECTED] >> >>Fully Searchable Archives With Friendly Web Interface at >>http://marc.free.net.ph >> >>To subscribe to the Linux Newbies' List: send "subscribe" in the body >>to [EMAIL PROTECTED] >> >> > > _ > Philippine Linux Users Group. Web site and archives at > http://plug.linux.org.ph To leave: send "unsubscribe" in the body to > [EMAIL PROTECTED] > > Fully Searchable Archives With Friendly Web Interface at > http://marc.free.net.ph > > To subscribe to the Linux Newbies' List: send "subscribe" in the body > to [EMAIL PROTECTED] _ Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph To leave: send "unsubscribe" in the body to [EMAIL PROTECTED] Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL PROTECTED]
