Thus said chas on Sun, 19 Mar 2000 06:08:15 +0800:
> I just rebooted the machine and have not yet started
> tcpserver and qmail-smtp, and suddenly I find dozens
> of qmail-remote processes running. (see below)
If you are certain that none of the daemons have been started, then is
it possible that you were also hacked and he has installed a script
that gets launched either via cron or in one of your system startup
scripts which simply sends email once your system is booted?
> /var/qmail/queue or any of its subdirectories)
> How can they still be getting through to my box
> if qmail-smtp is not even running yet ? (telneting
> to port 25 won't even get you a connection). And how
> can I get rid of them ?
You could set control/queuelifetime to 0, disconnect your network for a
minute or so and restart qmail-send.
Remember to change control/queuelifetime again to something reasonable
or simply delete it if the default is fine.
Andy
--
+====== Andy ====== TiK: garbaglio ======+
| Linux is about freedom of choice |
+== http://www.xmission.com/~bradipo/ ===+
PGP signature
