< Previous Page Return to Title Page Next Page >

"Rumplestiltskin" attacks

  •  One day, in our logs, we saw:

    •   
    Aug 11 211601 myhost sendmail[5119] VAA05119 <mark@myhost.com>... User unknown
Aug 11 211601 myhost sendmail[5120] VAA05120 <brian3@myhost.com>... User unknown
Aug 11 211602 myhost sendmail[5119] VAA05119 <mark1@myhost.com>... User unknown
Aug 11 211602 myhost sendmail[5120] VAA05120 <brian4@myhost.com>... User unknown
Aug 11 211606 myhost sendmail[5120] VAA05120 <brian5@myhost.com>... User unknown
Aug 11 211607 myhost sendmail[5119] VAA05119 <mark2@myhost.com>... User unknown
Aug 11 211607 myhost sendmail[5126] VAA05126 <smith@myhost.com>... User unknown
Aug 11 211608 myhost sendmail[5126] VAA05126 <smith1@myhost.com>... User unknown
Aug 11 211610 myhost sendmail[5126] VAA05126 <smith2@myhost.com>... User unknown
Aug 11 211610 myhost sendmail[5135] VAA05135 <wilson3@myhost.com>... User unknown
Aug 11 211611 myhost sendmail[5137] VAA05137 <me@myhost.com>... User unknown
Aug 11 211613 myhost sendmail[5119] VAA05119 <mark3@myhost.com>... User unknown
  • Commands were pipelined for speed
  • Connections dropped without DATA command
  • Legitimate mail halted during scan