[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Funny log files generated by cobalt list



A bit off topic but maybe somebody knows...

I noticed this today as I was looking at another firewall issue.  Why is
cobalt's listserv trying to overflow my SMTP server?  (The 192.168.1.2
address is translated via static nat)

Jun  8 12:07:18 sdest snort: [1:654:3] SMTP RCPT TO overflow
[Classification: Attempted Administrator Privilege Gain] [Priority: 1]:
{TCP} 63.77.128.170:4599 -> 192.168.1.2:25

Server:         ns1.cobalt.com
Address:        63.77.128.10#53
170.128.77.63.in-addr.arpa      name = list.cobalt.com.

-moiz