[NCLUG] Easy sendmail security question

[Charles Clarke]

If it is like the ones I get, it indicates that your sendmail checks
are working.  Check the lines above and below the Null connection ones.

Jun 24 01:16:48 ns sendmail[22875]: NOQUEUE: ruleset=check_relay,
arg1=s1.universalmaster.com.tw,
 arg2=210.71.162.33, relay=s1.universalmaster.com.tw [210.71.162.33] (may
be forged), reject=553
Blackhole:open spam relay 210.71.162.33 see:http://www.mail-abuse.org/rss/

Jun 24 01:16:49 ns sendmail[22875]: NOQUEUE: Null connection from
s1.universalmaster.com.tw [210.71.162.33] (may be forged)

These two lines indicate that my machine blackholed a message and
so the other side dropped the connection.

charles

On Mon, 25 Jun 2001, dobbster wrote:

> Date: Mon, 25 Jun 2001 00:30:58 +0000
> From: dobbster <dobbster at dobbster.com>
> Reply-To: nclug at nclug.org
> To: nclug at nclug.org
> Subject: [NCLUG] Easy sendmail security question
> 
> Here's an easy one.  Sometimes I get syslog entries like
> 
> Jun 22 04:20:21 dipole sendmail[20553]: NOQUEUE: Null connection from
> jadams.aadamsavery.com [65.162.172.20]
> 
> ...repeated maybe a dozen times.  Should I worry about them?
> 
> Mark
> _______________________________________________
> NCLUG mailing list
> NCLUG at nclug.org
> http://www.nclug.org/mailman/listinfo/nclug
> 


--------------------------------------------------------------------------
 Domain hosting from $15/month with error log analysis and link checking.
 http://www.clarkecomputer.com/sig.html       domains at clarkecomputer.com