From owner-freebsd-isp  Thu Apr 23 09:36:18 1998
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id JAA04612
          for freebsd-isp-outgoing; Thu, 23 Apr 1998 09:36:18 -0700 (PDT)
          (envelope-from owner-freebsd-isp@FreeBSD.ORG)
Received: from mailgate22.a001.sprintmail.com (mailgate22-hme0.a001.sprintmail.com [205.137.196.54])
          by hub.freebsd.org (8.8.8/8.8.8) with SMTP id JAA04581
          for <isp@freebsd.org>; Thu, 23 Apr 1998 09:36:08 -0700 (PDT)
          (envelope-from bminazzi@w3page.com)
Received: by mailgate22.a001.sprintmail.com (SMI-8.6/SMI-SVR4)
	id JAA11958; Thu, 23 Apr 1998 09:35:16 -0700
X-Complaints-To: abuse@sprintmail.com
Received: from sdn-ts-001coaurop16.dialsprint.net(206.133.160.35) by mailfep2-hme1 via dsmap-1.22
	id Q_10.1.1.6/Q_7516_1_353f6d8f; Thu, 23 Apr 1998 09:34:23 -0700
Message-ID: <353F6DE5.30C680DC@w3page.com>
Date: Thu, 23 Apr 1998 10:35:49 -0600
From: Blaine Minazzi <bminazzi@w3page.com>
Organization: What, me organized?
X-Mailer: Mozilla 3.01 (X11; I; Linux 2.0.32 i486)
MIME-Version: 1.0
To: isp@FreeBSD.ORG
Subject: Whats this??
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Maybe I am paranoid, but, I have been getting a LOT of these types of
messages in my mail log of late.  I have firewalled the biggest
offender, who has made over 700 of these connects in the last day.  I
found my system loaded, and LOTS of sendmail prcessess running when I
came in this morning.  A tail -f of the maillog revealed all these
NOQUEUE Null connections being made every few seconds.

Could someone please shed some light on what is ( or might ) be going on
here?

Thanks in advance.

Blaine

Apr 23 04:40:55 xenu sendmail[9960]: NOQUEUE: Null connection from
www.abramstech.com [206.113.130.33]
Apr 23 05:50:24 xenu sendmail[2091]: NOQUEUE: Null connection from
www.abramstech.com [206.113.130.33]
Apr 23 06:48:23 xenu sendmail[4999]: NOQUEUE: Null connection from
www.abramstech.com [206.113.130.33]
Apr 23 09:16:21 xenu sendmail[615]: NOQUEUE: SYSERR(root): Cannot open
hash database /etc/mail/popauth.db: Inappropriate file type or format
Apr 23 09:16:29 xenu sendmail[645]: NOQUEUE: SYSERR(root): Cannot open
hash database /etc/mail/popauth.db: Inappropriate file type or format
Apr 23 09:16:33 xenu sendmail[646]: NOQUEUE: SYSERR(root): Cannot open
hash database /etc/mail/popauth.db: Inappropriate file type or format
Apr 23 09:16:34 xenu sendmail[700]: NOQUEUE: SYSERR(root): Cannot open
hash database /etc/mail/popauth.db: Inappropriate file type or format
Apr 23 09:16:34 xenu sendmail[724]: NOQUEUE: SYSERR(root): Cannot open
hash database /etc/mail/popauth.db: Inappropriate file type or format
Apr 23 09:16:37 xenu sendmail[898]: NOQUEUE: SYSERR(harryj): Cannot open
hash database /etc/mail/popauth.db: Inappropriate file type or format
Apr 23 09:40:12 xenu sendmail[4515]: NOQUEUE: Null connection from
[195.76.98.8]
Apr 23 10:23:58 xenu sendmail[2288]: NOQUEUE: timeout waiting for input
from dnet.net during server cmd read

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message