Re: [TCLUG:16949] Sendmail/Linux Help

[Ben Kochie <ben@nerp.net>]

all the ipchains in the world arn't going to save you from a known remote
exploit on a service that you use

Thank You,
        Ben Kochie (ben@nerp.net)

*-----------------------*  [ - * - * - * - * - * - * - * - ]
| Unix/Linux Consulting |  [ Haiku Error Message:          ]
|  PC/Mac Repair        |  [  Chaos reigns within.         ]
|   Networking          |  [  Reflect, repent, and reboot. ]
| http://nerp.net       |  [  Order shall return.          ]
*-----------------------*  [ - * - * - * - * - * - * - * - ]

 "Unix is user friendly, Its just picky about its friends."

On Mon, 1 May 2000, Bob Nolte wrote:

> Has anybody tried PMFirewall from www.pointman.org.
> Petreley from LinuxWorld recommends it.
> 
> Bob Nolte
> 
> ----- Original Message -----
> From: "Eric F Crist" <mnslinky@eua.tzo.org>
> To: <tclug-list@mn-linux.org>
> Sent: Sunday, April 30, 2000 8:49 PM
> Subject: [TCLUG:16949] Sendmail/Linux Help
> 
> 
> > Hey,
> >
> > My web server got hacked on Thursday.  I had to do a complete reinstall
> due to
> > the fact that shadow/password and init files were deleted.
> >
> > Since I reinstalled linux, sendmail doesn't recognize any users.
> > I can send mail from localhost to any users, but I can't send mail to
> > myemail@<myhost.com>, as I get errors 550 (Relaying not allowed) and 551
> > (Unknown user)
> >
> > The other problem:
> >
> > Ever since I installed linux, new users show up unexpectedly.  For
> example,
> > It's like someone is going into my server and creating accounts with names
> like
> > reboot, system (UID 0, GRP 0), and other accounts that look legit, but I
> know
> > they're not (Caldera, by default, enters Caldera OpenLinux User in the
> Name
> > field, Unless you change it manually).
> >
> > Can someone please help me?
> >
> > I don't understand ipchains, and I need help setting up as a gateway.
> >
> > I also need to know how to setup sendmail so that it'll accept the correct
> > accounts (note: it won't even accept mail for root, postmaster, and
> > MAILER-DAEMON)
> >
> > If you would like to see the error message, send an email to
> > ecrist@ardent-hacker.net. (This is the account I am logged in as usually)
> >
> > Thanks
> >
> > Eric F Crist
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> > For additional commands, e-mail: tclug-list-help@mn-linux.org
> >
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> For additional commands, e-mail: tclug-list-help@mn-linux.org
>