weird yahoo connection on my mail server sendmail

Niceman2005 · 01-29-2010, 01:23 AM

Dear friends,

I realized there are often weird yahoo connection on my mail server (SCALIX sendmail).

on ps aux | grep yahoo , i get a lot of connections such as these:

root 7402 0.0 0.0 9400 3148 ? Ss 14:57 0:00 sendmail: ./o0T6tvfm005320 b.mx.mail.yahoo.com: client DATA status

I get about a dozen of it, i think it is taking up my connection, anyone has any idea why how these connections appear? Is it because of my server's security loophole????

thanks...

rweaver · 02-02-2010, 04:55 PM

Do the connections persist or timeout? If in doubt you could lower the timeout setting in sendmail.

Do you see any thing of interest when you do a netstat -plan?

Niceman2005 · 02-03-2010, 06:53 PM

Hi rweaver,

thanks for your reply.

How do i know if the connection is timeout or persistant?

I see a lot of these connections, i tried kill them, after a while new ones are regenerated.....

rweaver · 02-04-2010, 01:31 PM

Check the results of a netstat -plan against one you executed later and see if the PIDs are the same and if the connections are the same. If the pids are changing they're timing out, if they're not they're being held open and you probably need to look at enforcing a timeout in sendmail.