Suspected Intruder

[Paul Howarth]

Don Flinn wrote:
> I suspect that an intruder may be using my node to send e-mail, because
> I have received some notices from my e-mail daemon that such and such
> was not available when I never sent e-mail to that person/address.
> 
> How do I check if someone is logged in/using my machine?  I'm running
> FC3.

Please post the full headers of one of these notices. It's possible that 
you're just getting backscatter due to a virus somewhere else forging 
your address as the sender.

Paul.