On Wed, Sep 06, 2006 at 09:27:51AM +0200, Zbigniew Szalbot wrote:
> All of them are along the following line:
>
> 204P Received: from root by szalbot.homedns.org with local (Exim 4.60
> (FreeBSD))
> (envelope-from <root@???>)
> id 1GKlnS-0000Hv-AV
> for root@???; Wed, 06 Sep 2006 03:01:42 +0200
> 009* To: root
> 029T To: root@???
> 043 Subject: 192.168.11.51 security run output
> 052I Message-Id: <E1GKlnS-0000Hv-AV@???>
> 046F From: Charlie Root <root@???>
> 038 Date: Wed, 06 Sep 2006 03:01:42 +0200
>
> So I guess this is some kind of security problem/issue. Hope I have not
> been compromised yet...
I'm not necessarily sure in indictes a security problem. I suspect it's just
some cron-like process which is reading bits of your logs and mailing a
summary of them to you, like "logwatch" does perhaps. Anyway I think it's
probably a FreeBSD thing, so if you've got questions about the "security run
output" process then it's probably a good idea to seek out a FreeBSD mailing
list.
Regards,
--
Dave Evans
Power Internet
PGP key:
http://powernet.co.uk/~davide/pgpkey
