Package: logcheck   
Version: 1.2.39

Hello

from time to time i get such (false) "Security Event".

after a while you will see the 
message-ID "[EMAIL PROTECTED]" 
containing the nagic word "illegal"...

Question:
Can't that be abused for DoS or logfile floodding because it's 
only to the sender to use "trigger words", not only in hosts but 
in mail from too?

Of cause i could defined violation ignores, but i think that's
a more general problem, or?


Security Events
=-=-=-=-=-=-=-=
Jul 22 23:00:35 host sm-mta[13658]: j6ML0Z8M013658: from=<[EMAIL PROTECTED]>, 
size=1586, class=0, nrcpts=1, msgid=<[EMAIL PROTECTED]>, 
proto=ESMTP, daemon=MTA, relay=xxxxx [nnn.nnn.nnn.]





-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to