[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Is this some kind of Denial Of Service Attack



on 10/22/02 8:28 AM, aljuhani stated:

> Oct 21 05:08:18 ns sendmail[5350]: g9L96wQ05350: SYSERR: putoutmsg
> (node-c-8235.a2000.nl): error on output channel sending "550 5.7.1
> <devp94g@xxxxxxxxxx>... Relaying denied.  Please check your mail first.":
> Broken pipe.

We get a ton of these every now and then reported by Logcheck. We had a
china.com address hitting us with over 200 in 15 minutes. If they are
extremely annoying you can block them in the gui or do the hosts.deny file.
I have been back tracking them and if it is a C, B or A class from some
place like Korea or china, I block the whole class with what ever process
they are hitting, SENDMAIL: (IP BLOCK) or if I am feeling really p*ssed I
just do ALL: (IP BLOCK)
-- 
Thanks!!
Dave Thurman
The Web Presence Group / www.webpresencegroup.net
Listonly <at> webpresencegroup.net / Spam Block 8^Q