Autore: Mark Morley Data: To: exim-users Oggetto: Re: [exim] Re: [exim-dev] buffer overflow?
Tabor J. Wells wrote:
> Sound to me like exim might be getting confused about what file
> descriptors are in use.
I've seen this behavior since upgrading to 4.50 as well. To be precise,
I see a copy of my /etc/group file appended to some (very few) reject
log entries for INCOMING attempts that generate a sync error.
For example (wrapped and truncated):
2005-03-12 02:14:20 SMTP protocol violation: synchronization error (input
sent without waiting for greeting): rejected connection from
H=[218.109.116.199] input="# $FreeBSD: src/etc/group,v 1.19.2.3 2002/06/30
17:57:17 des Exp $\n#\nwheel:*:0:root,admin\ndaemon:*:1:daemon\n.....
I see maybe 25 of these a day. Always related to a sync error, usually from
different IPs, always the group file never anything else, and on multiple
machines. Only started with 4.50 and I've absolutely no doubt that this is
NOT the result of cracked server.