LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 11-19-2003, 12:04 AM   #1
slack66
Member
 
Registered: Jul 2003
Location: manila
Distribution: slackware 8 to 9
Posts: 199

Rep: Reputation: 30
unknown account in my mail server weird???


hello people

this afternoon went i read my maillog in my mail server one of my user received an email coming from ex. "james@xxx.com" and in my knowlege there no one name... james in my mail account... i try to finger command in my linux box but there no one name james????in my account?? weird what maybe the possible reason an outsider can email my local user and masquerade as a local user "james@xxx.com" my domin ex is "xxx.com"
can you try to help me people........... thk!!!

Last edited by slack66; 11-19-2003 at 12:05 AM.
 
Old 11-19-2003, 12:40 AM   #2
Bluesuperman
Member
 
Registered: Nov 2002
Distribution: Slackware
Posts: 155

Rep: Reputation: 30
What from field are you referring to ? Header from or ? From fields are easily be facted - does your maillog show the IP of the machine that sent the message ?

Michael.
 
Old 11-19-2003, 03:31 AM   #3
slack66
Member
 
Registered: Jul 2003
Location: manila
Distribution: slackware 8 to 9
Posts: 199

Original Poster
Rep: Reputation: 30
header from. nope only the ip address of the relay server of my isp.
 
Old 11-19-2003, 09:31 AM   #4
CEdstrom
LQ Newbie
 
Registered: Sep 2003
Location: Wisconsin
Distribution: Slackware
Posts: 27

Rep: Reputation: 15
Sounds like header manipulation. They forge the information to look like what you see. Can you post the header information and maybe we can see more details?
 
Old 11-19-2003, 11:00 PM   #5
slack66
Member
 
Registered: Jul 2003
Location: manila
Distribution: slackware 8 to 9
Posts: 199

Original Poster
Rep: Reputation: 30
oops.... i erase it but if i see it again i will try to post it
for now i try to monitor my maillog and it doesnt appear anymore in my maillog.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to have limited mail on a linux server that support unlimited e-mail account mmh Linux - General 3 03-15-2006 06:52 AM
HELP! fatal: unknown account qmail?setuidgid azul79 Linux - Networking 2 07-20-2004 08:22 AM
automatic user account creation in mail server kar11 Linux - Software 0 04-13-2004 11:55 PM
Postfix sending mail for unknown users to other server? Phaethar Linux - Software 2 03-18-2004 01:33 PM
mail server user account admin? bejamex Linux - Software 0 06-22-2003 09:59 PM


All times are GMT -5. The time now is 06:25 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration