It looks to me, someone was either trying to send that info to that
account, or a program created that info and was trying to send it to that
account [EMAIL PROTECTED] etc.
Either way you n eed to find out what and why?
Could be the case, that someone has got into your machine while it was
connected to the net... btw what distro and revisions is the system?
On Tue, 20 Mar 2001, Wayne Innes wrote:
> Hi,
>
> Yesterday I received this in my email :-
>
> The original message was received at Mon, 19 Mar 2001 15:52:14 +1100
> from root@localhost
>
> ----- The following addresses had permanent fatal errors -----
> [EMAIL PROTECTED]
>
> ----- Transcript of session follows -----
> ... while talking to smtp.idx.com.au.:
> >>> MAIL From:<[EMAIL PROTECTED]> SIZE=2358
> <<< 501 <[EMAIL PROTECTED]>... Sender domain must exist
> 501 [EMAIL PROTECTED] Data format error
>
> Attached to it were :-
>
> Reporting-MTA: dns; sloppy.linux.bogus
> Arrival-Date: Mon, 19 Mar 2001 15:52:14 +1100
>
> Final-Recipient: RFC822; [EMAIL PROTECTED]
> Action: failed
> Status: 5.5.2
> Remote-MTA: DNS; smtp.idx.com.au
> Diagnostic-Code: SMTP; 501 <[EMAIL PROTECTED]>... Sender domain must
> exist
> Last-Attempt-Date: Mon, 19 Mar 2001 17:24:47 +1100
>
> and
>
> eth0 Link encap:Ethernet HWaddr 00:00:01:10:48:65
> inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:181517 errors:0 dropped:0 overruns:0 frame:0
> TX packets:122317 errors:0 dropped:0 overruns:0 carrier:0
> collisions:518 txqueuelen:100
> Interrupt:11 Base address:0x300
>
> lo Link encap:Local Loopback
> inet addr:127.0.0.1 Mask:255.0.0.0
> UP LOOPBACK RUNNING MTU:3924 Metric:1
> RX packets:7823 errors:0 dropped:0 overruns:0 frame:0
> TX packets:7823 errors:0 dropped:0 overruns:0 carrier:0
> collisions:0 txqueuelen:0
>
> ppp0 Link encap:Point-to-Point Protocol
> inet addr:203.166.3.207 P-t-P:203.19.10.10 Mask:255.255.255.255
> UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1524 Metric:1
> RX packets:34839 errors:718 dropped:0 overruns:0 frame:718
> TX packets:24562 errors:0 dropped:0 overruns:0 carrier:0
> collisions:0 txqueuelen:10
>
> bin:*:1:1:bin:/bin:
> daemon:*:2:2:daemon:/sbin:
> adm:*:3:4:adm:/var/adm:
> lp:*:4:7:lp:/var/spool/lpd:
> sync:*:5:0:sync:/sbin:/bin/sync
> shutdown:*:6:0:shutdown:/sbin:/sbin/shutdown
> halt:*:7:0:halt:/sbin:/sbin/halt
> mail:*:8:12:mail:/var/spool/mail:
> news:*:9:13:news:/var/spool/news:
> uucp:*:10:14:uucp:/var/spool/uucp:
> operator:*:11:0:operator:/root:
> games:*:12:100:games:/usr/games:
> gopher:*:13:30:gopher:/usr/lib/gopher-data:
> ftp:*:14:50:FTP User:/home/ftp:
> nobody:*:99:99:Nobody:/:
>
> etc .....
>
> I have the feeling I should be worried, can anyone who knows more than me
> shed any light on whats happened.
>
>
> --
> SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> More Info: http://slug.org.au/lists/listinfo/slug
>
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug
