Hi,
I run a fully updated CentOS 4.4 machine. This morning I got the errors below in my daily Logwatch report (Sendmail part). What has happend? Just some new bogus spammer that cant get the protocol right or is the server under attack? I have googled around but cannot fins any answer or I just suck at googleing...
Any ideas ?
Jens
--------------------- sendmail Begin ------------------------
SEVERE ERRORS -------------
System Error Messages: timeout writing message to poczta.orange.pl.: Broken pipe: 5 Time(s)
Total SEVERE ERRORS: 5
**Unmatched Entries** 6: fl=0x8000, mode=100640: dev=3/1, ino=11748389, nlink=1, u/gid=0/0, size=12288: 5 Time(s) 2: fl=0x1, mode=20666: CHR: dev=0/13, ino=1810, nlink=1, u/gid=0/0, size=0: 5 Time(s) 0: fl=0x0, mode=20666: CHR: dev=0/13, ino=1810, nlink=1, u/gid=0/0, size=0: 5 Time(s) 1: fl=0x1, mode=20666: CHR: dev=0/13, ino=1810, nlink=1, u/gid=0/0, size=0: 5 Time(s) 12: fl=0x8000, mode=100640: dev=3/1, ino=11748387, nlink=1, u/gid=0/0, size=12288: 4 Time(s) 11: fl=0x8000, mode=100640: dev=3/1, ino=11748387, nlink=1, u/gid=0/0, size=12288: 4 Time(s) MCI@0x0: NULL: 4 Time(s) 3: fl=0x2, mode=140777: SOCK localhost->[[UNIX: /dev/log]]: 4 Time(s) 7: fl=0x8000, mode=100640: dev=3/1, ino=11748389, nlink=1, u/gid=0/0, size=12288: 4 Time(s) 5: fl=0x0, mode=100600: dev=3/65, ino=15007748, nlink=1, u/gid=0/51, size=4190579: 4 Time(s) 4: fl=0x2, mode=100600: dev=3/65, ino=14794755, nlink=1, u/gid=0/51, size=1632: 2 Time(s) MCI@0x92dfa44: flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>, errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000, phase=client DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl., lastuse=Tue Oct 24 22:13:37 2006\n: 1 Time(s) 10: fl=0x8000, mode=100640: dev=3/1, ino=11748385, nlink=1, u/gid=0/51, size=12288: 1 Time(s) 9: fl=0x802, mode=140777: SOCK xxx.tld/42800->(Transport endpoint is not connected): 1 Time(s) 14: fl=0x8000, mode=100640: dev=3/1, ino=11748387, nlink=1, u/gid=0/0, size=12288: 1 Time(s) MCI@0x92dfa44: flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>, errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000, phase=client DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl., lastuse=Tue Oct 24 21:58:37 2006\n: 1 Time(s) 5: fl=0x8000, mode=100640: dev=3/1, ino=11748389, nlink=1, u/gid=0/0, size=12288: 1 Time(s) 15: fl=0x8000, mode=100640: dev=3/1, ino=11748387, nlink=1, u/gid=0/0, size=12288: 1 Time(s) 12: fl=0x802, mode=140777: SOCK localhost->[[UNIX: /var/lib/imap/socket/lmtp]]: 1 Time(s) 9: fl=0x8000, mode=100640: dev=3/1, ino=11748385, nlink=1, u/gid=0/51, size=12288: 1 Time(s) 13: fl=0x2, mode=140777: SOCK localhost->[[UNIX: /dev/log]]: 1 Time(s) 9: fl=0x802, mode=140777: SOCK xxx.tld/42805->(Transport endpoint is not connected): 1 Time(s) 8: fl=0x802, mode=140777: SOCK xxx.tld/42794->(Transport endpoint is not connected): 1 Time(s) 3: fl=0x2, mode=100600: dev=3/65, ino=14794753, nlink=1, u/gid=0/0, size=1481: 1 Time(s) MCI@0x92dfa44: flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>, errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000, phase=client DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl., lastuse=Tue Oct 24 21:43:43 2006\n: 1 Time(s) 4: fl=0x0, mode=100600: dev=3/65, ino=15007748, nlink=1, u/gid=0/51, size=4190579: 1 Time(s) 8: fl=0x8000, mode=100640: dev=3/1, ino=11748386, nlink=1, u/gid=0/0, size=12288: 1 Time(s) 9: fl=0x802, mode=140777: SOCK xxx.tld/42814->(Transport endpoint is not connected): 1 Time(s) MCI@0x8944874: flags=7806c<CACHED,ESMTP,SIZE,8BITMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>, errno=0, herrno=0, exitstat=0, state=2, pid=0, maxsize=0, phase=idle, mailer=cyrusv2, status=2.1.5, rstatus=250 2.1.5 Ok, host=localhost, lastuse=Tue Oct 24 21:21:56 2006\n: 1 Time(s) 4: fl=0x2, mode=100600: dev=3/65, ino=14794753, nlink=1, u/gid=0/51, size=1632: 1 Time(s) 7: fl=0x8000, mode=100640: dev=3/1, ino=11748386, nlink=1, u/gid=0/0, size=12288: 1 Time(s) 9: fl=0x802, mode=140777: SOCK xxx.tld/42794->(Transport endpoint is not connected): 1 Time(s) 8: fl=0x802, mode=140777: SOCK xxx.tld/42805->(Transport endpoint is not connected): 1 Time(s) MCI@0x92dfa44: flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>, errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000, phase=client DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl., lastuse=Tue Oct 24 21:28:41 2006\n: 1 Time(s) 4: fl=0x2, mode=100600: dev=3/65, ino=14794754, nlink=1, u/gid=0/51, size=1632: 1 Time(s) 8: fl=0x802, mode=140777: SOCK xxx.tld/42800->(Transport endpoint is not connected): 1 Time(s) 11: fl=0x802, mode=140777: SOCK localhost->[[UNIX: /var/lib/imap/socket/lmtp]]: 1 Time(s) 17: fl=0x802, mode=140777: SOCK xxx.tld/42789->(Transport endpoint is not connected): 1 Time(s) 16: fl=0x802, mode=140777: SOCK xxx.tld/42789->(Transport endpoint is not connected): 1 Time(s) 8: fl=0x802, mode=140777: SOCK xxx.tld/42814->(Transport endpoint is not connected): 1 Time(s) MCI@0x894c9d4: flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>, errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000, phase=client DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl., lastuse=Tue Oct 24 21:21:57 2006\n: 1 Time(s)
---------------------- sendmail End -------------------------