Hi,
I run a fully updated CentOS 4.4 machine. This morning I got the errors
below in my daily Logwatch report (Sendmail part). What has happend? Just
some new bogus spammer that cant get the protocol right or is the server
under attack? I have googled around but cannot fins any answer or I just
suck at googleing...
Any ideas ?
Jens
--------------------- sendmail Begin ------------------------
SEVERE ERRORS
-------------
System Error Messages:
timeout writing message to poczta.orange.pl.: Broken pipe: 5 Time(s)
Total SEVERE ERRORS: 5
**Unmatched Entries**
6: fl=0x8000, mode=100640: dev=3/1, ino=11748389, nlink=1, u/gid=0/0,
size=12288: 5 Time(s)
2: fl=0x1, mode=20666: CHR: dev=0/13, ino=1810, nlink=1, u/gid=0/0,
size=0: 5
Time(s)
0: fl=0x0, mode=20666: CHR: dev=0/13, ino=1810, nlink=1, u/gid=0/0,
size=0: 5
Time(s)
1: fl=0x1, mode=20666: CHR: dev=0/13, ino=1810, nlink=1, u/gid=0/0,
size=0: 5
Time(s)
12: fl=0x8000, mode=100640: dev=3/1, ino=11748387, nlink=1, u/gid=0/0,
size=12288: 4 Time(s)
11: fl=0x8000, mode=100640: dev=3/1, ino=11748387, nlink=1, u/gid=0/0,
size=12288: 4 Time(s)
MCI at 0x0: NULL: 4 Time(s)
3: fl=0x2, mode=140777: SOCK localhost->[[UNIX: /dev/log]]: 4 Time(s)
7: fl=0x8000, mode=100640: dev=3/1, ino=11748389, nlink=1, u/gid=0/0,
size=12288: 4 Time(s)
5: fl=0x0, mode=100600: dev=3/65, ino=15007748, nlink=1, u/gid=0/51,
size=4190579: 4 Time(s)
4: fl=0x2, mode=100600: dev=3/65, ino=14794755, nlink=1, u/gid=0/51,
size=1632: 2 Time(s)
MCI at 0x92dfa44:
flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>,
errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000,
phase=client
DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl.,
lastuse=Tue Oct 24 22:13:37 2006\n: 1 Time(s)
10: fl=0x8000, mode=100640: dev=3/1, ino=11748385, nlink=1, u/gid=0/51,
size=12288: 1 Time(s)
9: fl=0x802, mode=140777: SOCK xxx.tld/42800->(Transport
endpoint is not connected): 1 Time(s)
14: fl=0x8000, mode=100640: dev=3/1, ino=11748387, nlink=1, u/gid=0/0,
size=12288: 1 Time(s)
MCI at 0x92dfa44:
flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>,
errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000,
phase=client
DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl.,
lastuse=Tue Oct 24 21:58:37 2006\n: 1 Time(s)
5: fl=0x8000, mode=100640: dev=3/1, ino=11748389, nlink=1, u/gid=0/0,
size=12288: 1 Time(s)
15: fl=0x8000, mode=100640: dev=3/1, ino=11748387, nlink=1, u/gid=0/0,
size=12288: 1 Time(s)
12: fl=0x802, mode=140777: SOCK localhost->[[UNIX:
/var/lib/imap/socket/lmtp]]:
1 Time(s)
9: fl=0x8000, mode=100640: dev=3/1, ino=11748385, nlink=1, u/gid=0/51,
size=12288: 1 Time(s)
13: fl=0x2, mode=140777: SOCK localhost->[[UNIX: /dev/log]]: 1 Time(s)
9: fl=0x802, mode=140777: SOCK xxx.tld/42805->(Transport
endpoint is not connected): 1 Time(s)
8: fl=0x802, mode=140777: SOCK xxx.tld/42794->(Transport
endpoint is not connected): 1 Time(s)
3: fl=0x2, mode=100600: dev=3/65, ino=14794753, nlink=1, u/gid=0/0,
size=1481:
1 Time(s)
MCI at 0x92dfa44:
flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>,
errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000,
phase=client
DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl.,
lastuse=Tue Oct 24 21:43:43 2006\n: 1 Time(s)
4: fl=0x0, mode=100600: dev=3/65, ino=15007748, nlink=1, u/gid=0/51,
size=4190579: 1 Time(s)
8: fl=0x8000, mode=100640: dev=3/1, ino=11748386, nlink=1, u/gid=0/0,
size=12288: 1 Time(s)
9: fl=0x802, mode=140777: SOCK xxx.tld/42814->(Transport
endpoint is not connected): 1 Time(s)
MCI at 0x8944874:
flags=7806c<CACHED,ESMTP,SIZE,8BITMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>,
errno=0,
herrno=0, exitstat=0, state=2, pid=0, maxsize=0, phase=idle, mailer=cyrusv2,
status=2.1.5, rstatus=250 2.1.5 Ok, host=localhost, lastuse=Tue Oct 24
21:21:56
2006\n: 1 Time(s)
4: fl=0x2, mode=100600: dev=3/65, ino=14794753, nlink=1, u/gid=0/51,
size=1632: 1 Time(s)
7: fl=0x8000, mode=100640: dev=3/1, ino=11748386, nlink=1, u/gid=0/0,
size=12288: 1 Time(s)
9: fl=0x802, mode=140777: SOCK xxx.tld/42794->(Transport
endpoint is not connected): 1 Time(s)
8: fl=0x802, mode=140777: SOCK xxx.tld/42805->(Transport
endpoint is not connected): 1 Time(s)
MCI at 0x92dfa44:
flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>,
errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000,
phase=client
DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl.,
lastuse=Tue Oct 24 21:28:41 2006\n: 1 Time(s)
4: fl=0x2, mode=100600: dev=3/65, ino=14794754, nlink=1, u/gid=0/51,
size=1632: 1 Time(s)
8: fl=0x802, mode=140777: SOCK xxx.tld/42800->(Transport
endpoint is not connected): 1 Time(s)
11: fl=0x802, mode=140777: SOCK localhost->[[UNIX:
/var/lib/imap/socket/lmtp]]:
1 Time(s)
17: fl=0x802, mode=140777: SOCK xxx.tld/42789->(Transport
endpoint is not connected): 1 Time(s)
16: fl=0x802, mode=140777: SOCK xxx.tld/42789->(Transport
endpoint is not connected): 1 Time(s)
8: fl=0x802, mode=140777: SOCK xxx.tld/42814->(Transport
endpoint is not connected): 1 Time(s)
MCI at 0x894c9d4:
flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>,
errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000,
phase=client
DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl.,
lastuse=Tue Oct 24 21:21:57 2006\n: 1 Time(s)
---------------------- sendmail End -------------------------