[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Virus email



"webmaster@xxxxxxxxxxxx" wrote:

> Here's another complete one:
> Return-Path: <>
> Received: from 0016756770 (slip-32-101-140-168.mo.us.prserv.net
> [32.101.140.168])
>         by www.musicnn.com (8.9.3/8.9.3) with SMTP id WAA19644
>         for <webmaster@xxxxxxxxxxxxx>; Wed, 13 Dec 2000 22:36:55 -0400
> Date: Wed, 13 Dec 2000 22:36:55 -0400

Is www.musicnn.com your system?  Presuming so, then someone has
connected directly to your system from a dialup IP#,
slip-32-101-140-168.mo.us.prserv.net.  The first step would be to notify
abuse@xxxxxxxxxxx  While the address should work, it may not, so do a CC
to postmaster@xxxxxxxxxxx

You might want to also look into configuring sendmail to refuse mail
from all dialup IP# blocks.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205