[lug] Sendmail thoughts.....

[D. Stimits]

Sean Reifschneider wrote:
> 
> On Thu, Dec 14, 2000 at 02:33:10PM -0700, Shannon Johnston wrote:
> >This is the message that's coming through in the messages log:
> >
> >DEC 14 13:58:04 <my domain> identd[10697] connection from great.plains.net
> >DEC 14 13:58:04 <my domain> identd[10697] from: 206.168.65.1 (
> >great.plains.net ) for: 3093, 25
> 
> Note that this isn't an SMTP connection, it's an ident connection asking
> what user on your machine is making a connection *TO* great.plains.net
> on port 25.  So the question is, why are YOU connecting to THEM?
> 
> What do your mail logs say?
> 
> Sean
> --

Good point. But that would also raise an eyebrow if a machine is for
some reason being asked to connect to the port on an unknown machine. If
someone had managed to put spam relay onto the box, would this be a
possible symptom?