Re: Active System Attack Alerts

2004-01-29 Thread Geir Svalland
On Thursday 29 January 2004 06.00, Saint Aardvark the Carpeted wrote:
> Geir Svalland disturbed my sleep to write:
> > Shouldn't this been taken care of when I'm running Sendmail 8.12.10
> > ?
>
> Well, I would expect the fix to be still in .10, and for the message
> to be logged.  Or am I missing something?
>
> Hugh

Thx for your time and effort.
Guess It's nothing to worry about, but the headline in the logfiles,
" Active System Attack Alerts " , made me curious.
Because I've my MUA to filter mail over a certain size, I have a slight 
memory of the mail mentioned, concerning some licensing issue,  it was 
rather large and included a couple of image files which I never opened.
Any way, it looks like a one time happening :-)

Regards Geir.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Active System Attack Alerts

2004-01-28 Thread Saint Aardvark the Carpeted
Geir Svalland disturbed my sleep to write:
> Shouldn't this been taken care of when I'm running Sendmail 8.12.10 ?

Well, I would expect the fix to be still in .10, and for the message
to be logged.  Or am I missing something?

Hugh
-- 
Saint Aardvark the Carpeted
[EMAIL PROTECTED]
Because the plural of Anecdote is Myth.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Active System Attack Alerts

2004-01-28 Thread Geir Svalland
On Wednesday 28 January 2004 11.33, Saint Aardvark the Carpeted wrote:
> Geir Svalland disturbed my sleep to write:
> > Active System Attack Alerts
> > =-=-=-=-=-=-=-=-=-=-=-=-=-=
> > Jan 27 02:12:41 odin sendmail[46386]: i0R1CbKR046385: Fixed MIME
> > Content-Type header field (possible attack)
> > Jan 27 02:12:41 odin sendmail[46386]: i0R1CbKR046385: Fixed MIME
> > Content-Type header field (possible attack)
>
> First hit on Googling "fixed mime content field" turns up a post last
> year to the freebsd-security mailing list:
>
>   http://lists.freebsd.org/pipermail/freebsd-security/2003-April/00010
>0.html
>
> which in turn points to a security fix in Sendmail 8.12.9.
>
> HTH,
> Hugh

Hi, and thx for your reply.
Shouldn't this been taken care of when I'm running Sendmail 8.12.10 ?

> telnet odin 25
Trying 217.209.211.129...
Connected to odin.swedehost.com.
Escape character is '^]'.
220 odin.swedehost.com ESMTP Sendmail 8.12.10/8.12.10; Wed, 28 Jan 2004 
16:43:35 +0100 (CET)


Regards
Geir Svalland.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Active System Attack Alerts

2004-01-28 Thread Saint Aardvark the Carpeted
Geir Svalland disturbed my sleep to write:
> Active System Attack Alerts
> =-=-=-=-=-=-=-=-=-=-=-=-=-=
> Jan 27 02:12:41 odin sendmail[46386]: i0R1CbKR046385: Fixed MIME 
> Content-Type header field (possible attack)
> Jan 27 02:12:41 odin sendmail[46386]: i0R1CbKR046385: Fixed MIME 
> Content-Type header field (possible attack)

First hit on Googling "fixed mime content field" turns up a post last
year to the freebsd-security mailing list:

http://lists.freebsd.org/pipermail/freebsd-security/2003-April/000100.html

which in turn points to a security fix in Sendmail 8.12.9.

HTH,
Hugh
-- 
Saint Aardvark the Carpeted
[EMAIL PROTECTED]
Because the plural of Anecdote is Myth.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"