Date: Wed, 13 Dec 2000 12:01:05 -0500 (EST) From: Rob Simmons <rsimmons@wlcg.com> To: Szilveszter Adam <sziszi@petra.hos.u-szeged.hu> Cc: freebsd-security@FreeBSD.ORG Subject: Re: 911 lockdown! Message-ID: <Pine.BSF.4.21.0012131200340.12264-100000@mail.wlcg.com> In-Reply-To: <20001213174249.L24233@petra.hos.u-szeged.hu>
next in thread | previous in thread | raw e-mail | index | archive | help
Yes. If you want to disable it, add: FEATURE(`no_default_msa') to your mc file and rebuild the cf. Robert Simmons Systems Administrator http://www.wlcg.com/ On Wed, 13 Dec 2000, Szilveszter Adam wrote: > Hello! > > On Wed, Dec 13, 2000 at 05:32:35PM +0100, Dag-Erling Smorgrav wrote: > > > 587/tcp open submission > > > > This is probably a back door the intruder left behind. Use sockstat(1) > > to determine which process owns the socket, and kill it (and make sure > > it doesn't restart when you reboot) > > > > Uhm, if he is running sendmail (a recent version,) than it may be just > that: sendmail now runs on two ports, 25 and 587 unless configured > otherwise. OTB it will listen on both ports. Esp since he said that > telnetting to this port starts up a sendmail which is expected behaviour. > > -- > Regards: > > Szilveszter ADAM > Szeged University > Szeged Hungary > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0012131200340.12264-100000>