From owner-freebsd-questions Tue Jul 31 4:38:15 2001 Delivered-To: freebsd-questions@freebsd.org Received: from void.xpert.com (xpert.com [199.203.132.1]) by hub.freebsd.org (Postfix) with ESMTP id 1B93037B403 for ; Tue, 31 Jul 2001 04:38:06 -0700 (PDT) (envelope-from Yonatan@xpert.com) Received: from mailserv.xpert.com ([199.203.132.135]) by void.xpert.com with esmtp (Exim 3.20 #1) id 15RWqA-0003a1-00; Tue, 31 Jul 2001 13:33:30 +0300 Received: by mailserv.xpert.com with Internet Mail Service (5.5.2650.21) id ; Tue, 31 Jul 2001 14:37:02 +0300 Message-ID: From: Yonatan Bokovza To: 'Hans Zaunere' , questions@freebsd.org Subject: RE: Spoof attack? Date: Tue, 31 Jul 2001 14:37:01 +0300 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > > Ok, that sounds reasonable. However, sendmail is not > running. Its a very stripped down system, with > nothing running except ssh. The only thing I could > think of is my periodic security mailings from cron, > which I get in my root box. You got that right. When "periodic" sends a mail locally it execs sendmail. > However, if I dont have > sendmail running, how am I getting these? Also, can > these be sent somewhere else (externally), even > without me running sendmail? The mails can be sent from your machine to a remote machine, yes. You can try mail myothermail@hotmail-or-something.com < /etc/motd to see that you don't have to run sendmail for outgoing mails. You should be able to reproduce the warning message with mail localuser