Sendmail user open

[SNC]

I am posting this here because I have found nothing on this anywhere else. I am hoping someone can point me in the right direction.
I have a RAQ4 with all the patches.
Mailscanner and AV.
I have been seeing a ton of this:
sendmail: ./i0LE7tn19674 mx2.hotmail.com.: user open
I was told by someone that it could be the formmail hack.
So out went all the formmailpl's I could find and in went the mns version. I am still getting them.

Any help??

 

[SNC]

On the off chance that anyone cares about this:
I was able to stop the user open's by killing popauthd
Now this will stop people from sending SMTP but who cares!!
Most of the ISPs in this area are blocking pass through anyway.

No one take this the wrong way PLEASE.
I have never had a prolem that no one even offered a comment on.
I am really shocked that no one had anything to say about this.
I am wondering if I am one of the first to be hacked this way.
I wonder what the future will hold....

 

[DaveSimmons]

Sometimes no one here has an answer -- I asked recently about Brief emulation in VS.Net and got 0 replies myself .

I guess everyone here likes the mikerowesoft-approved keyboard shortcuts, and no one can tell you how to find phantom sendmail callers.

 

[SNC]

Dave,
What I meant was no one anywhere had anything to say.
I have this question posted an a dozen places that normaly get a reply to even if its wrong.
I wasnt bitching, I just think that its weird. No one wants to touch it.

 

[burnedout]

Originally posted by: SNC

Dave,
What I meant was no one anywhere had anything to say.
I have this question posted an a dozen places that normaly get a reply to even if its wrong.
I wasnt bitching, I just think that its weird. No one wants to touch it.

I admin a couple linux servers with sendmail and haven't seen this yet. But I'll certainly look for it now. Have you tried Usenet?

 

[SNC]

No just online fourms.