l i n u x - u s e r s - g r o u p - o f - d a v i s
L U G O D
 
Next Meeting:
September 2: Social gathering
Next Installfest:
TBD
Latest News:
Aug. 18: Discounts to "Velocity" in NY; come to tonight's "Photography" talk
Page last updated:
2005 Apr 20 09:10

The following is an archive of a post made to our 'vox-tech mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox-tech] Scary cron-deamon message
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox-tech] Scary cron-deamon message



On Wednesday 20 April 2005 07:19, Daniel A. Lorca-Martinez wrote:

> I might be completely in the dark here, but it sounds like you might
> be the victim of a spammer a) using your machine to send garbage out
> or b) using a @stonegoose bogus return address.  I think the former
> is likely though.  Do you require authentication for SMTP from your
> server?  If not, then some spammer found your server and is using it
> to spam.  If this is the case, I'd shut that hole quickly, before you
> start getting on the anti-spam server lists.

I don't even allow SMTP from my machine.  I use POP3 and IMAP on that machine 
to check my e-mail, and Sendmail so that Squirrelmail can send messages out.  
I'm pretty sure I've locked down Sendmail so that no outside machines can 
hook up to it, and the only ports allowed to that machine through my firewall 
are 22, 80, and 110.  So I'm reasonably sure my machine isn't sending out 
spam.  More likely someone's been sending out spam with the stonegoose.com 
domain (I've seen plenty of them with my mossroot.com domain, which annoys 
the hell out of me).

Is there more that I should be doing?


> Is that the complete message?

I'm afraid so.  Nothing comparable in any of my system logs, and they all 
appear normal as well.  Chkrootkit found nothing either.

-- 
Richard S. Crawford
http://www.mossroot.com

Attachment: pgp00018.pgp
Description: PGP signature

_______________________________________________
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech


LinkedIn
LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
facebook
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
Sunset Systems
Who graciously hosts our website & mailing lists!