1. Please take a little time for this simple survey! Thank you for participating!
    Dismiss Notice
  2. Dear Pleskians, please read this carefully! New attachments and other rules Thank you!
    Dismiss Notice
  3. Dear Pleskians, I really hope that you will share your opinion in this Special topic for chatter about Plesk in the Clouds. Thank you!
    Dismiss Notice

seeking other centos 4.4 users

Discussion in 'Plesk for Linux - 8.x and Older' started by masterkain, Jan 13, 2007.

  1. masterkain

    masterkain Guest

    0
     
    every 5 minutes or so I get this in my maillog

    Jan 3 10:59:29 www pop3d-ssl: Connection, ip=[127.0.0.1]
    Jan 3 10:59:29 www pop3d-ssl: LOGOUT, ip=[127.0.0.1]
    Jan 3 10:59:29 www pop3d: Connection, ip=[127.0.0.1]
    Jan 3 10:59:29 www pop3d: LOGOUT, ip=[127.0.0.1]
    Jan 3 10:59:29 www imapd-ssl: Connection, ip=[127.0.0.1]
    Jan 3 10:59:29 www imapd: Connection, ip=[127.0.0.1]
    Jan 3 10:59:29 www imapd: 1167818369.113964 LOGOUT, ip=[127.0.0.1],
    rcvd=12, sent=308, maildir=/etc/rc.d/init.d

    I cannot understand what is that, my box is not hacked, it behaves like
    this since I installed it.
    I'm on CentOS 4.4 art's rpm, so far I've no clue what is doing this thing and
    why, somebody has experienced the same behaviour?

    thanks in advance.
     
  2. nars

    nars Guest

    0
     
    maybe watchdog checking if mail server is up?
     
  3. masterkain

    masterkain Guest

    0
     
    uhm.. maybe you're right, I will check.

    thanks
     
  4. micxz

    micxz Guest

    0
     
    did you guys figure this out? "maildir=/etc/rc.d/init.d" seems suspicious. I'm seeing this even from the outside (not localhost).
     
  5. Faris Raouf

    Faris Raouf Silver Pleskian Plesk Guru

    31
    30%
    Joined:
    Mar 15, 2009
    Messages:
    667
    Likes Received:
    17
    As it is every 5 minutes I'm sure it is watchdog. The easy way to tell is to turn watchdog off :)

    Faris.
     
  6. micxz

    micxz Guest

    0
     
    This is going on with my setup when a user tries a short mail name when they are not allowed:

    Jul 26 14:15:03 jam imapd: Connection, ip=[::ffff:xx.xx.xx.xx]
    Jul 26 14:15:23 jam imapd: IMAP connect from @ [::ffff:xx.xx.xx.xx]checkmailpasswd: FAILED: test - short names not allowed from @ [::ffff:xx.xx.xx.xx]ERR: LOGIN FAILED, ip=[::ffff:xx.xx.xx.xx]
    Jul 26 14:15:23 jam imapd: 1311714923.484998 LOGOUT, ip=[::ffff:xx.xx.xx.xx], rcvd=10, sent=84, maildir=/etc/rc.d/init.d

    I'm not sure what watchdog is so as far as I know I'm not running it.
     
  7. Faris Raouf

    Faris Raouf Silver Pleskian Plesk Guru

    31
    30%
    Joined:
    Mar 15, 2009
    Messages:
    667
    Likes Received:
    17
    That's normal.

    Is it only the /etc/rc.d/init.d maildir path issue that's worrying you here? Yes, it is odd/wrong but I don't think it is significant and therefore nothing to worry about (famous last words).

    The thing is that the maildir would match the user logging in. When there's no user/wrong login, there's no correct maildir to display. that's my logic anyway. I dont know why it would use /etc/rc.d/init.d when it doesn't know what to use but maybe it is because smtp_psa is launched by xinetd?

    Faris.
     
Loading...