Re: [CentOS] Sendmail log entries

2012-09-20 Thread Les Mikesell
On Thu, Sep 20, 2012 at 2:31 PM, James B. Byrne wrote: > > > The list of sources is far too long to include in a message to the > list. Suffice to say that each IP address is automatically blocked > for varying lengths of time following any failed attempt. What I am > trying to discover is what

Re: [CentOS] Sendmail log entries

2012-09-20 Thread James B. Byrne
On Thu, September 20, 2012 11:10, m.r...@5-cent.us wrote: > I'm not real good with smtp, but it looks as though someone from > Spain is trying to directly connect to your smtp server. Unless > you know that they're legitimately using your system, I'd block > that IP now. > The list of sources is

Re: [CentOS] Sendmail log entries

2012-09-20 Thread Paul Heinlein
On Thu, 20 Sep 2012, James B. Byrne wrote: Recently we began seeing lots of these log entries on our off-site mx smtp host. I have googled this but I am not clear from what I have read if this is something we can stop altogether or should even worry about. WARNING Possible Attack: A

Re: [CentOS] Sendmail log entries

2012-09-20 Thread m . roth
James B. Byrne wrote: > Recently we began seeing lots of these log entries on our off-site mx > smtp host. I have googled this but I am not clear from what I have > read if this is something we can stop altogether or should even worry > about. > > Comments? > I'm not real good with smtp, but it lo

[CentOS] Sendmail log entries

2012-09-20 Thread James B. Byrne
Recently we began seeing lots of these log entries on our off-site mx smtp host. I have googled this but I am not clear from what I have read if this is something we can stop altogether or should even worry about. Comments? Logwatch. . . - sendmail Begin -