Messages in this thread | | | Date | Wed, 19 Mar 2003 13:12:49 -0500 (EST) | From | "Richard B. Johnson" <> | Subject | Re: Everything gone! |
| |
On Wed, 19 Mar 2003, Jesse Pollard wrote:
> On Wednesday 19 March 2003 11:33 am, John Jasen wrote: > > On Wed, 19 Mar 2003, Richard B. Johnson wrote: > > > Really? How did you do this? > > > Clone my machine-name and domain, I mean? Without -bs in the > > > header? I need to know. This could be exploited and needs > > > to be fixed. > > > > Perhaps: > > > > telnet target.system 25 > > enter SMTP commands > > quit > > Normaly that would record the IP of the host doing the telnet. > (the first "Recieved: from" line in the log list where the original says > "Received: from localhost"....)
Yes. I just looked at maillog on that machine and all I had was the 'evidence' of me screwing with it to see. Apparently it wasn't used for forwarding mail as I thought.
Cheers, Dick Johnson Penguin : Linux version 2.4.20 on an i686 machine (797.90 BogoMips). Why is the government concerned about the lunatic fringe? Think about it.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |