SUSPICOUS: SMTP service on my box

Discussion in 'Linux, BSD and Other OS's' started by Impotence, May 11, 2007.

  1. Impotence

    Impotence May the source be with u!

    Likes Received:
    6
    Trophy Points:
    38
    Hey all,

    I was very surpriesed today to see smtp running on my computer! i don't remember installing it directly with apt... it might have been requried by somethig else, but i don't really remember seeing it anywhere, but, i have been drunk while in charge of my computer! (and staying up stupidly early [6AM] just because i don't feel like sleeping]

    The smtp service only seems to be accessable localy, nmap only shows it when i scan the machine from the machine (nmap -sS -p1-65535 localhost)

    advice? i want to know how it got there! The only other service i have running is SSH (world accessable) [but i do have a fairly sizeable password]
     
  2. Anti-Trend

    Anti-Trend Nonconformist Geek

    Likes Received:
    118
    Trophy Points:
    63
    Most distros run an SMTP daemon on loopback for internal mailing (between users on the same system) and for sending logs. What distro are you running? Also, which SMTP daemon is running?
     
  3. Impotence

    Impotence May the source be with u!

    Likes Received:
    6
    Trophy Points:
    38
    Ubuntu 7.04... how do i identify the deamon that owns the port?
     
  4. Anti-Trend

    Anti-Trend Nonconformist Geek

    Likes Received:
    118
    Trophy Points:
    63
    Code:
    netstat -p
     
  5. Impotence

    Impotence May the source be with u!

    Likes Received:
    6
    Trophy Points:
    38
    Code:
    sudo netstat -p -l
    
    Gave me
     
  6. Anti-Trend

    Anti-Trend Nonconformist Geek

    Likes Received:
    118
    Trophy Points:
    63
    Totally normal. Exim is the sendmail replacement on Debian and derivative systems. It's installed by default as your system mailer, but forbidden from sending, receiving or relaying for outside hosts.
     
  7. Impotence

    Impotence May the source be with u!

    Likes Received:
    6
    Trophy Points:
    38
  8. Anti-Trend

    Anti-Trend Nonconformist Geek

    Likes Received:
    118
    Trophy Points:
    63
    No problem. :)
     

Share This Page