Report on last cmd
Hello I have been having a lot of trouble with my sendmail setup, someone is using my system. I have found that when I run the last cmd, I find a lot of strange entries such as ftp ftp p50852BD8.dip.t- Sun Oct 6 03:57 - 03:57 (00:00)ftp ftp p508ECDDA.dip.t- Sun Oct 6 03:37 - 03:37 (00:00)ftp ftp 212.171.38.1 Sat Oct 5 23:16 - 23:16 (00:00)ftp ftp 210.23.10.25 Sat Oct 5 18:40 - 18:40 (00:00) Can anyone tell me what these are, are they the result of programs accessing my TCP/IP addresses? Tx in advance. glt
Report on last cmd
Hello I have been having a lot of trouble with my sendmail setup, someone is using my system. I have found that when I run the last cmd, I find a lot of strange entries such as ftp ftp p50852BD8.dip.t- Sun Oct 6 03:57 - 03:57 (00:00)ftp ftp p508ECDDA.dip.t- Sun Oct 6 03:37 - 03:37 (00:00)ftp ftp 212.171.38.1 Sat Oct 5 23:16 - 23:16 (00:00)ftp ftp 210.23.10.25 Sat Oct 5 18:40 - 18:40 (00:00) Can anyone tell me what these are, are they the result of programs accessing my TCP/IP addresses? Tx in advance. glt
sendmail
Can anyone help me as I am having trouble with mail being sent from my system. Periodically when I run ps x, I find processes running and tonight I found the following process sendmail: server debian.org [65.125.64.134] child wai sendmail: server debian.org [65.125.64.134] cmd read I have had other similar messages and tonight I lodged complaints with the ISP whose servers have been noted and I am still waiting for them to get back to me. The problem with this entry here, is it appears to be coming from a debian.org server, which I thought would be safe as a brick house. Any commemts will be appreciated. glt
sendmail
Can anyone help me as I am having trouble with mail being sent from my system. Periodically when I run ps x, I find processes running and tonight I found the following process sendmail: server debian.org [65.125.64.134] child wai sendmail: server debian.org [65.125.64.134] cmd read I have had other similar messages and tonight I lodged complaints with the ISP whose servers have been noted and I am still waiting for them to get back to me. The problem with this entry here, is it appears to be coming from a debian.org server, which I thought would be safe as a brick house. Any commemts will be appreciated. glt
