안녕하세요..
어제 저녁에 메일로그에 이상한 로그가 기록되어 있어서
질문을 드립니다..
이런 내용이 있네요..
 sendmail[2060]: NOQUEUE: SYSERR(nobody): drop_privileges: setuid(0) succeeded (when it should not)
sendmail[2060]: NOQUEUE: SYSERR(nobody): /tmp/foo/sm.cf: line 1: drop_privileges: setuid(0) succeeded (when it should no
t) sendmail[2060]: NOQUEUE: SYSERR(nobody): /tmp/foo/sm.cf: line 2: drop_privileges: setuid(0) succeeded (when it should
 not) sendmail[2060]: NOQUEUE: SYSERR(nobody): drop_privileges: setuid(0) succeeded (when it should not)
sendmail[2335]: NOQUEUE: IDENT:arkanoid@[211.56.231.6] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
 sendmail[371]: rejecting connections on daemon MTA: load average: 16
sendmail[371]: rejecting connections on daemon MSA: load average: 16
sendmail[371]: rejecting connections on daemon MTA: load average: 18
sendmail[371]: rejecting connections on daemon MSA: load average: 18
sendmail[371]: rejecting connections on daemon MTA: load average: 18
sendmail[371]: rejecting connections on daemon MSA: load average: 18
sendmail[371]: rejecting connections on daemon MTA: load average: 18
sendmail[371]: rejecting connections on daemon MSA: load average: 18
sendmail[371]: rejecting connections on daemon MTA: load average: 18
sendmail[371]: rejecting connections on daemon MSA: load average: 18
sendmail[371]: rejecting connections on daemon MTA: load average: 16
sendmail[371]: rejecting connections on daemon MSA: load average: 16
sendmail[371]: rejecting connections on daemon MTA: load average: 12
sendmail[371]: rejecting connections on daemon MSA: load average: 12
sendmail[371]: accepting connections again for daemon MTA
sendmail[371]: accepting connections again for daemon MSA
 정말 수상(?)한 메세지들 입니다... setuid 도 그렇고..
설마 센드멜 해킹에 성공하여 스팸멜이 발송된건 아니겠죠? TT
센드멜 버전은 8.11.0 입니다..
사용자 인증하도록 되어 있구..
어제 서버에 접속한 내부 계정은 없구요..
메일로그에 이런 내용만 남아 있네요..
참, /tmp/foo/sm.cf 도 찾아 봤는데 없군요.
디렉토리도 없고.. 벌써 지웠나? --;
답변 부탁드립니다...
T.T--전기 공급 좋은 건물에서 살고 시포라~ -서버 따운 막기 캠페인- TT