Sendmail - null connection

[Carey Goad]

I am seeing the following in the mail.log every minute or so - any clues what it means?

May 24 10:34:26 hpnfs sendmail[18610]: NOQUEUE: Null connection from [10.110.6.2
45]
May 24 10:35:26 hpnfs sendmail[18614]: NOQUEUE: Null connection from [10.110.6.2
45]

Also, the following is in the syslog.log (I think they are related):

May 24 11:24:26 hpnfs ftpd[18796]: FTP session closed
May 24 11:25:26 hpnfs ftpd[18799]: FTP session closed
May 24 11:26:26 hpnfs ftpd[18801]: FTP session closed
~

Thanks

[Pedro Sousa]

Hi!
Are you running sendmail?
If so, at least you need to configure your /etc/mail/sendmail.cw and /etc/mail/sendmail.cf files.
check this manual:
http://www.docs.hp.com/hpux/onlinedocs/B2355-90147/B2355-90147.html
good luck.

[Carey Goad]

We are - I found the IP address belongs to a system monitor (what's up)....

[Thom Cornwell]

Is the IP address in the log running something called Big Brother?

[Carey Goad]

I don't think it is called Big Brother (it is called "what's up").

[Thom Cornwell]

The "whats-up" monitor is checking ports 21, and 25. If the messages are a nuisance, then what about configuring syslogd a little differently

[Pedro Sousa]

Sorry Carey, but I don't understand...
you have a monitor called exactly "what's up" and with an IP??

[Carey Goad]

Thom - how would I go about configuring syslogd to "ignore" these errors?

Thanks

[Josee Bourget-Thuma]

Hi,

I logged a forum on the same error message and was told to configure sendmail.cf and sendmail.cw. I find that a challenging task since the .cf file itself is 20+ page document and HP recommends NOT modifying it except for two short sections. I'm still getting my error message.

sendmail[ ]: NOQUEUE: Null connection from ...

I was further researching this today and found this forum. The mention of BigBrother caught my eye as I know that our Field service uses this freeware. Is there something I should know about BigBrother and HP?

Thanks in advance for all the help!
Josee...

[Thom Cornwell]

I am going to defer to the HP experts on the "correct" configuration for syslod (/etc/syslog.conf). If "whats up) is like Big Brother, it leaves little messages every time it visits the port due to the connection being made to the port in question. The real solution would be to buy HPs VPO or VPW (Vantage Point Operations or Vantage Point for Windows) and replace whats up or BigBrother. I would be interested to see a discussion on syslog.conf, as it is a small file but more cryptic than the sendmail.cf file. I hope this helps.

[Carey Goad]

I found out how to filer the syslog.

Thanks for the help!

[Jordan Bean]

http://forums.itrc.hp.com/cm/QuestionAnswer/1,1150,0xd6fea12d6d27d5118fef0090279cd0f9,00.html

[Josee Bourget-Thuma]

Carey,

Would you care to share your findings please?
Thanks!

Josee...