is sendmail safe?

[Ben Luey <lueyb@carleton.edu>]

My computer got another port scan / possible attack. To the outside world,
everything is denied but smtp and web, but I log all attempts to use imap
and telnet. My logs show that this ip address tried lots of attempts to
imap and telnet. Also a syn to 1114, which I think was just a random port
scan. Then I noticed that Sendmail gave me this messages:

maillog:May  8 14:15:46 pclueyb sendmail[24808]: NOQUEUE: Null connection
from IDENT:root@[141.217.13.25]
maillog:May  8 14:15:58 pclueyb sendmail[24810]: NOQUEUE: [141.217.13.25]:
expn root                   

What does that mean? Also is sendmail-8.9.3-10 (rh 6.0 default) safe, or
should I look into something else?



Ben Luey
lueyb@carleton.edu
ICQ: 19144397

So the GOP thinks the American public has a short-term memory. Well, I have
one word for them -- potatoe.       
        -- Karen Baird, Letters to Editor, San Francisco Chronicle 12/17/98