[101643] in RedHat Linux List
Re: anyone seen this in maillog?
daemon@ATHENA.MIT.EDU (Ramon Gandia)
Sat Nov 28 00:46:51 1998
Date: Fri, 27 Nov 1998 20:43:09 -0900
From: Ramon Gandia <rfg@nook.net>
To: redhat-list@redhat.com
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
Charles Galpin wrote:
>
> I'm getting these in my maillog. My imap client is acting really wierd, it
> keeps acting like it loses contact with the server. I'm not sure if these
> two problems are related, but it seems like it.
>
> I have no idea who these IPs are.
>
> Nov 26 08:07:55 pooh imapd[15054]: command stream end of file, while reading
> line user=??? host=ip203.los-angeles3.ca.pub-
> ip.psi.net [38.14.43.203]
> Nov 26 08:28:10 pooh imapd[15247]: command stream end of file, while reading
> line user=??? host=ip203.los-angeles3.ca.pub-
> ip.psi.net [38.14.43.203]
> Nov 26 08:28:19 pooh imapd[15249]: command stream end of file, while reading
> line user=??? host=ip203.los-angeles3.ca.pub-
> ip.psi.net [38.14.43.203]
> Nov 26 08:28:53 pooh imapd[15256]: command stream end of file, while reading
> line user=??? host=whittrio.com [24.234.31.82
> ]
> Nov 26 08:34:47 pooh IAA15315 mx03.erols.com.: client DATA status
Its the latest incarnation of a hacker attack on imap4. Imap4 has
had a *lot* of security holes. Personal experience.
--
Ramon Gandia ==== Sysadmin ==== Nook Net ==== http://www.nook.net
285 West First Avenue rfg@nook.net
P.O. Box 970 tel. 907-443-7575
Nome, Alaska 99762-0970 ======================= fax. 907-443-2487
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com http://archive.redhat.com
To unsubscribe: mail redhat-list-request@redhat.com with
"unsubscribe" as the Subject.
