Date: Sun, 08 Sep 1996 10:32:50 -0400 From: Kurt Schafer <kurt@cyberbeach.net> To: freebsd-questions@freebsd.org Subject: Mail bombing perhaps ? Message-ID: <1.5.4.32.19960908143250.008b7aec@post.cyberbeach.net>
next in thread | raw e-mail | index | archive | help
When I watch my maillog, I see requests from this site come in every minute or two like clockwork. Sep 7 13:25:03 wave sendmail[1204]: NAA01204: from=<owner-bonsai@HOME.EASE.LSOFT.COM>, size=0, class=0, pri=0, nrcpts=0, proto=ESMTP, relay=root@cicerone.uunet.ca [142.77.1.11] Sep 7 13:26:02 wave sendmail[1212]: NAA01212: from=<owner-bonsai@HOME.EASE.LSOFT.COM>, size=0, class=0, pri=0, nrcpts=0, proto=ESMTP, relay=root@cicerone.uunet.ca [142.77.1.11] Sep 7 13:27:05 wave sendmail[1221]: NAA01221: from=<owner-bonsai@HOME.EASE.LSOFT.COM>, size=0, class=0, pri=0, nrcpts=0, proto=ESMTP, relay=root@cicerone.uunet.ca [142.77.1.11] Sep 7 13:28:06 wave sendmail[1228]: NAA01228: from=<owner-bonsai@HOME.EASE.LSOFT.COM>, size=0, class=0, pri=0, nrcpts=0, proto=ESMTP, relay=root@cicerone.uunet.ca [142.77.1.11] However, when I grep through the log for the corresponding identifiers, ie NAA01228, I never see any evidence of the mail actually arriving anywhere ? Does this make any sense ? Is there some other way I can determine whether or not the mail from this site, as evidenced by the transactions above, are actually arriving in any of my users mailboxes ? -Kurt
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1.5.4.32.19960908143250.008b7aec>