From owner-freebsd-questions Sat Aug 5 9:55:13 2000 Delivered-To: freebsd-questions@freebsd.org Received: from enterweb.enterit.com (enterweb.enterit.com [209.45.199.22]) by hub.freebsd.org (Postfix) with ESMTP id 96DD337BA30 for ; Sat, 5 Aug 2000 09:55:07 -0700 (PDT) (envelope-from jconner@enterit.com) Received: from KWAN [209.45.199.38] by enterweb.enterit.com with ESMTP (SMTPD32-5.04) id A69B3DEA0118; Sat, 05 Aug 2000 12:53:47 EST Message-Id: <4.2.0.58.20000805130626.01549248@mail.enterit.com> X-Sender: jconner@mail.enterit.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.58 Date: Sat, 05 Aug 2000 13:08:01 -0400 To: freebsd-questions@freebsd.org From: Jim C Subject: Possible hack attempt? Q&A Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I just found a rejected message from my fetchmail daemon and found it very interesting. However, since I am not an expert at sendmail hacks, Im curious to see what information I might be able to get from folks on this list. Here are a couple hearders from the message: The original message was received at Fri, 4 Aug 2000 22:45:27 -0400 (EDT) from root@localhost.enterit.com [127.0.0.1] ----- The following addresses had permanent fatal errors ----- <$B%V%C%/%J%$%D!&%W%m%8%'%/%H> ----- Transcript of session follows ----- 550 <$B%V%C%/%J%$%D!&%W%m%8%'%/%H>... Host unknown (Name server: $b%v%c%/%j%$%d.uucp.: host not found) 550 ... User unknown From: FETCHMAIL-DAEMON@notjames.enterit.com To: &%W%m%8%'%/%H@$B%V%C%/%J%$%D.UUCP MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="om-mani-padme-hum-266-1-965443527" Our spam filter rejected this transaction. What do you guys think? I think it was a possible attempt that failed (hopefully) but like I said, Im no expert at sendmail. TIA folks - Jim ___________________________ | Jim C | | EnterIT.com | / ) | Systems Administrator | / / | Network Engineer | ( ( | email: jconner@enterit.com| (((\ \> |/ ) pagejim@pseudonet.org | (\\\\ \_/ /_________________________| \ / \ _/ / / / / To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message