I run logwatch to condence all the system logs each night. I've been
getting the connections from the net.mx address ( or variants - as I
assume they are from a dial up pool ) for the last week. From two to
three times.
Now I know the ipop3d is netscape and biff checking my inbox...
------Begin
---------------- Connections (secure-log) Begin -------------------
Connections:
Service in.telnetd:
mexico1354.infosel.net.mx (200.36.149.181): 3 Time(s)
Service ipop3d:
cyberman.infiniteworlds.dyn.ml.org (192.168.10.1): 134 Time(s)
------End
I'm currious - because There are only 4 user accounts on this system -
two are on vacation in Australia - not Mexico, one is in Richmond and
uses Bell Atlantic, and Me. I'm currious who is telneting in, and if
they are loging on as anyone ( an obvious question )
I ran all the log files in /var/logs through grep looking for net.mx,
and it the only entries I saw were in the header info for inbound
e-mail in the senmail log. And secure has just the above info, logons
were about 4 minutes apart.
If it's realated to sendmail why is this the only address that I see
that happening with?
--
-------------------------------------------------------------------------------
James Michael Keller | [EMAIL PROTECTED] or [EMAIL PROTECTED]
(c)1998 All rights reserved | http://www.radix.net/~jmkeller
-------------------------------------------------------------------------------
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
To unsubscribe: mail [EMAIL PROTECTED] with
"unsubscribe" as the Subject.
