Twice now I have found qmail on a 4.1.2 server in some kind of loop sending what appears to be it's own log file to 'samir@iis.registrars.com'. The machine is in a remote office so I don't know what might have started it but it seems to continue forever with the logfile growing every time because it logs this activity too. Is this likely to be a bug in qmail, a hacker attack, or some misconfiguration? The messages are logged on the way in as:
from <> qp 4432 uid 8
where the 4432 appears to be a process id and changes each time and the size of the message keeps increasing.
I broke the cycle by removing the copy from /var/spool/smptd/spool, but I don't know enough about qmail to stop it from happening again.
0 Replies
456 Views