From owner-freebsd-questions  Mon Mar 24  9:53:20 2003
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A9C1B37B401
	for <freebsd-questions@FreeBSD.ORG>; Mon, 24 Mar 2003 09:53:16 -0800 (PST)
Received: from man-97-187.ResHall.Berkeley.EDU (man-97-187.Reshall.Berkeley.EDU [169.229.97.187])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 39CDD43F93
	for <freebsd-questions@FreeBSD.ORG>; Mon, 24 Mar 2003 09:53:16 -0800 (PST)
	(envelope-from lou@man-97-187.ResHall.Berkeley.EDU)
Received: from man-97-187.ResHall.Berkeley.EDU (localhost.ResHall.Berkeley.EDU [127.0.0.1])
	by man-97-187.ResHall.Berkeley.EDU (8.12.8/8.12.8) with ESMTP id h2OHonTa001951
	for <freebsd-questions@FreeBSD.ORG>; Mon, 24 Mar 2003 09:50:49 -0800 (PST)
	(envelope-from lou@man-97-187.ResHall.Berkeley.EDU)
Received: from localhost (lou@localhost)
	by man-97-187.ResHall.Berkeley.EDU (8.12.8/8.12.8/Submit) with ESMTP id h2OHonSm001948
	for <freebsd-questions@FreeBSD.ORG>; Mon, 24 Mar 2003 09:50:49 -0800 (PST)
Date: Mon, 24 Mar 2003 09:50:48 -0800 (PST)
From: Tak Pui LOU <lou@man-97-187.ResHall.Berkeley.EDU>
To: freebsd-questions@FreeBSD.ORG
Subject: Can't recieve nor send email suddenly. Am I being hacked?
Message-ID: <20030324094227.J1935@man-97-187.ResHall.Berkeley.EDU>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Spam-Status: No, hits=0.0 required=5.0
	tests=none
	version=2.50
X-Spam-Level: 
X-Spam-Checker-Version: SpamAssassin 2.50 (1.173-2003-02-20-exp)
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

I upgraded my sendmail and the whole system to 4.8-RC recently using CVS.
Until yesterday afternoon I recieved a suspicous message, sendmail was
working fine. After that, sendmail was not accepting connections because
there was no root running sendmail to accept connections. I wasn't able to
send out any mail too. I only saw the sendmail queue run as smmsp.

root     129  0.0  1.2  3040 1500  ??  Ss    1:15AM   0:02.98 sendmail:
accepting connections (sendmail)
smmsp    132  0.0  1.1  2920 1444  ??  Is    1:15AM   0:00.05 sendmail:
Queue runner@00:30:00 for /var/spool/clientmqueue (sendmail)

After reboot, I got the above sendmail processes. Was my system hacked by
someone?

---
Lou

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message