Re: weird telnet activity/qmail?

Chad Glendenin (chad.glendenin@yale.edu)
Sat, 23 Jan 1999 22:12:46 -0500 (EST)

This reminds me: is it worth the trouble to switch to qmail for a personal
workstation that pretty much only handles the emails from cron to root? Do you

think qmail's security is as much better than sendmail as they claim?

Also, redhat uses sendmail by default, and Debian uses smail. Is there a
benefit to either from a security point of view?

thanks again,
ccg

P.S. I just got a 3-button Logitech Mouseman today. These things are pretty
sweet. PS/2 or serial. I just unplugged my old mouse, plugged in the new, and

gpm and X both worked perfectly without restarting or anything. I love that. My

Windows98-using roommate bought a logitech wheel mouse today. After, of course
,
rebooting his computer several times just to update the drivers or whatever, it

still doesn't work right! I love linux.

> X-Unix-From: chad.glendenin@yale.edu Sat Jan 23 21:11:20 1999
> X-BadHeader: Sat Jan 23 21:11:20 1999
> Date: Sat, 23 Jan 1999 21:11:14 -0500 (EST)
> From: Chad Glendenin <chad.glendenin@yale.edu>
> Subject: weird telnet activity
> To: linux-list@pantheon.yale.edu
> Content-MD5: veInc6mHi3J3alC/Pp/A6Q==
>
> i just recently got around to closing off my linux box and 'booby-trapping'
> tcp_wrappers. admittedly, i probably would have seen this kind of stuff
before
> if i had been checking my system logs regularly, but sadly i am rather lazy
when
> it comes to security and general system administration on my own workstation
(oh
> no, someone might try to read one of my old history papers or delete my mp3's
!
> seriously, i do understand the potential for mischief, and in my copious free

> time i plan to wipe my drive, reinstall linux, and setup tripwire or L6 or
> similar before networking it.) anyway, i am now seeing weird stuff like this
:
>
> __________________
> Sat Jan 23 19:32:46 EST 1999
> refused connection from host NRAD09.kard.akh-wien.ac.at (addr=149.148.126.9)
> user root requested service from in.telnetd[624]
> __________________
>
> should i be worried about random connection requests like this? i've also
been
> getting identd requests from finland and imap requests from the netherlands(!
)
> what gives?
>
> thanks,
> ccg
>