Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-security
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-security@g.o
From: "Christopher P. Kern" <cpkern@...>
Subject: Strange occurrence of sendmail and disk I/O in background....
Date: Tue, 19 Feb 2008 11:42:27 +0000
Can anyone tell me what service/application would start sendmail?

I discovered my Gentoo computer recently very active with I/O on the
harddrive and receive/transmit activity on an invocation of gkrellm. In
researching the activity, I found that I had an smtp connection to a
computer in Toronto, Canada. The connection was on port 43121 and looked
like so:
  
  bash$  netstat -t -u
  Active Internet connections (w/o servers)
  Proto Recv-Q Send-Q Local Address  Foreign Address  State
  tcp        0      1 [myIP]:43121   [theirIP]:smtp   ESTABLISHED
    ... Other usual stuff ....

    Running a check to see what may be running in the process tables:

 bash$  ps -efl

 showed this process here:
 /usr/sbin/sendmail -FCronDaemon -odi -oem -oi -t

    I could not find the cause for this application invocation. Nothing
in the rc-update, crontab, nor services suggests that sendmail ought to 
be running.

    When I killed the PID for this sendmail process, all disk I/O
immediately stopped. The site for the IP address which had a connection 
to my computer was never one to which I had ever visited. I know of no 
reason I would ever go to it.
   
    I found vulnerabilities associated with a lower version of sendmail
but none with the version I've installed right now.

    Any suggestions, ideas, or explanations are welcomed.

          Thanks in advance,
      

                      Kern.









Attachment:
signature.asc (OpenPGP digital signature)
Replies:
Re: Strange occurrence of sendmail and disk I/O in background....
-- William Yang
Re: Strange occurrence of sendmail and disk I/O in background....
-- Javier Barrio
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Strange occurrence of sendmail and disk I/O in background....
Next by thread:
Re: Strange occurrence of sendmail and disk I/O in background....
Previous by date:
Strange occurrence of sendmail and disk I/O in background....
Next by date:
Re: Strange occurrence of sendmail and disk I/O in background....


Updated Jun 17, 2009

Summary: Archive of the gentoo-security mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.