Weird mail - what's going on?

Peter Langfelder peter.langfelder at gmail.com
Tue Jan 26 22:21:39 UTC 2010


> If you never ever used the mail server on the local laptop (.e.g sendmail) to
> try to send email, then this does look suspicious. It seems that someone or
> something is trying to use it to send email.
> Is there anything under /var/spool/mqueue ?
>
> AC

Well, I'm not sure about the use of sendmail - a bugreport may have
been sent here and there, but not recently.

There are two files in /var/spool/mqueue, one of length 2 bytes and
only showing a = character, the other has the following:

V8
T1264480817
K1264542918
N15
P1380469
I8/3/116792
MDeferred: Connection timed out with emailaddress.com.
Fwbs
$_localhost.localdomain [127.0.0.1]
$rESMTP
$speter
${daemon_flags}
${if_addr}127.0.0.1
S<plangfelder at peter>
A<>
MDeferred: Connection timed out with emailaddress.com.
rRFC822; your at emailaddress.com
RPFD:<your at emailaddress.com>
H?P?Return-Path: <<81>g>
H??Received: from peter (localhost.localdomain [127.0.0.1])
        by peter (8.14.3/8.14.3) with ESMTP id o0Q4eHaT004810
        for <your at emailaddress.com>; Mon, 25 Jan 2010 20:40:17 -0800
H?x?Full-Name: Peter Langfelder
H??Received: (from plangfelder at localhost)
        by peter (8.14.3/8.14.3/Submit) id o0Q4eHD9004806
        for your at emailaddress.com; Mon, 25 Jan 2010 20:40:17 -0800
H??From: Peter Langfelder <plangfelder at peter>
H??Message-Id: <201001260440.o0Q4eHD9004806 at peter>
H??Date: Mon, 25 Jan 2010 20:40:16 -0800
H??To: your at emailaddress.com
H??Subject: Photos
H??User-Agent: Heirloom mailx 12.4 7/29/08
H??MIME-Version: 1.0
H??Content-Type: text/plain; charset=us-ascii
H??Content-Transfer-Encoding: quoted-printable

Thanks!

Peter


More information about the users mailing list