James Michael Keller wrote:
>
> I run logwatch to condence all the system logs each night. I've been
> getting the connections from the net.mx address ( or variants - as I
> assume they are from a dial up pool ) for the last week. From two to
> three times.
>
> Now I know the ipop3d is netscape and biff checking my inbox...
>
> ------Begin
>
> ---------------- Connections (secure-log) Begin -------------------
>
> Connections:
> Service in.telnetd:
> mexico1354.infosel.net.mx (200.36.149.181): 3 Time(s)
> Service ipop3d:
> cyberman.infiniteworlds.dyn.ml.org (192.168.10.1): 134 Time(s)
>
> ------End
>
> I'm currious - because There are only 4 user accounts on this system -
> two are on vacation in Australia - not Mexico, one is in Richmond and
> uses Bell Atlantic, and Me. I'm currious who is telneting in, and if
> they are loging on as anyone ( an obvious question )
>
> I ran all the log files in /var/logs through grep looking for net.mx,
> and it the only entries I saw were in the header info for inbound
> e-mail in the senmail log. And secure has just the above info, logons
> were about 4 minutes apart.
>
> If it's realated to sendmail why is this the only address that I see
> that happening with?
>
> --
> -------------------------------------------------------------------------------
> James Michael Keller | [EMAIL PROTECTED] or [EMAIL PROTECTED]
> (c)1998 All rights reserved | http://www.radix.net/~jmkeller
> -------------------------------------------------------------------------------
>
> --
> PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
> http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
> To unsubscribe: mail [EMAIL PROTECTED] with
> "unsubscribe" as the Subject.
If everyone is on vacation but you stop the sendmail dameon and see if
they are still there. 134 mail messages is a lot but it is possible.
Brian Bothern
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
To unsubscribe: mail [EMAIL PROTECTED] with
"unsubscribe" as the Subject.
