From: mouss (no email)
Date: Mon Apr 02 2007 - 08:44:27 EDT
wrote:
> mouss wrote:
> > wrote:
> >>
> >>> if you are "lucky", the mail was delivered to a mailbox instead of to
> >>> cyrus. look in /var/mail/ (or whatever is the default delivery
> >>> directory for your MTA).
> >>
> >> No, it was intended to recipients outside of the mail server.
> >
> > In fact, a more probable "hole" is an anti-virus silently quarantining
> > mail. if you are running an AV, look in its quarantine.
>
> Oh, thanks. This is a good hint. I check the guaranteed messages and
> there weren't such. But added it to my debug list for next time it
> happens.
>
> > another possibility is a honeypot triggerred by an IDS system.
>
> What is this?
>
>
a honeypot is a trap. an IDS is an Intrusion Detection System. some IDS
software will listen on known ports and acts like a server, except that
it doesn't really do what the attacker expects.
This is not very probable, but you never know.
|
|
|