[Systems] [Systems-logs] sunjammer.sugarlabs.org-Munin_alert

[Samuel Cantero]

Mmm. Look at this:

scg at sunjammer:~$ ldapsearch -x "uid=test"
# extended LDIF
#
# LDAPv3
# base <dc=sugarlabs,dc=org> (default) with scope subtree
# filter: uid=test
# requesting: ALL
#

# test, People, sugarlabs.org
dn: uid=test,ou=People,dc=sugarlabs,dc=org
uid: test
cn: Test
sn: Test
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
*mail: als-at at yandex.ru <als-at at yandex.ru>*
displayName: Test

# search result
search: 2
result: 0 Success

It doesn't look as a user account created by us.

On Mon, Apr 4, 2016 at 9:36 AM, Samuel Cantero <scanterog at gmail.com> wrote:

> Yes. I've removed all mail from the postfix queue.
>
> We have this in the mail.log:
>
> Apr  3 23:08:24 sunjammer postfix/smtpd[30990]: 2685D121751:
> client=unknown[23.249.162.17], sasl_method=PLAIN, sasl_username=test
>
> On Mon, Apr 4, 2016 at 9:25 AM, Bernie Innocenti <bernie at codewiz.org>
> wrote:
>
>> Something is going on since tonight: email piling up in the spool, lots
>> of DNS requests and high disk activity on the root partition.
>>
>>
>> http://munin.sugarlabs.org/sugarlabs.org/sunjammer.sugarlabs.org/index.html
>>
>> Can someone check if we are being used to send spam?
>>
>>
>> On April 4, 2016 7:55:56 AM EDT, munin at sugarlabs.org wrote:
>>>
>>> sugarlabs.org :: sunjammer.sugarlabs.org :: Load average
>>>  WARNINGs: load is 19.40 (outside range [:15]).
>>>
>>> ------------------------------
>>>
>>> Systems-logs mailing list
>>> Systems-logs at lists.sugarlabs.org
>>> http://lists.sugarlabs.org/listinfo/systems-logs
>>>
>>>
>> --
>> Sent from my Android device with K-9 Mail. Please excuse my brevity.
>>
>> _______________________________________________
>> Systems mailing list
>> Systems at lists.sugarlabs.org
>> http://lists.sugarlabs.org/listinfo/systems
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sugarlabs.org/archive/systems/attachments/20160404/fad38aa0/attachment.html>