Security Incidents mailing list archives

Re: Bad Referrals?

From: Valdis Kletnieks <Valdis.Kletnieks () VT EDU>
Date: Thu, 8 Feb 2001 00:11:53 -0500

On Wed, 07 Feb 2001 21:32:44 EST, "Derek Kwan [321844]" <Derek () KWAN CA>  said:

But AFAIK nothing on my box is try to do a reverse look up on that IP....
Hummmm..... Maybe something that I don't know is happening on my box?


Check your Sendmail logs. Sendmail likes to try to do reverse lookups,
which can cause this to happen if they're trying to spam you.

Also, check the usual tcp_wrapper, portsentry, etc... logs for any
activity.

                                Valdis Kletnieks
                                Operating Systems Analyst
                                Virginia Tech

Current thread:

Re: DNS server crashed, (continued)
- - - Re: DNS server crashed karthik krishnamurthy (Feb 06)
    - Re: DNS server crashed Andrei MURESAN (Feb 07)
    - Re: DNS server crashed Max Gribov (Feb 07)
    - Re: DNS server crashed Bryan Bradsby (Feb 10)
- Re: Crazy port 111 scans Tyrannis Von Nettesheim (Feb 06)
- Re: Crazy port 111 scans Reeves, Mike (Feb 06)
- Re: Crazy port 111 scans Reeves, Mike (Feb 07)
  - Bad Referrals? Derek Kwan (Feb 07)
    - Re: Bad Referrals? Chip McClure (Feb 07)
    - Re: Bad Referrals? Derek Kwan [321844] (Feb 07)
    - Re: Bad Referrals? Valdis Kletnieks (Feb 10)