[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Problem with software linke Beijing Express Email Address downloa der



Hi all,

    I have problems with any RaQ, the numbre of sendmail proceses increse to
the moon !!!

    Looking in the maillog, I see :

    <aaa@xxxxxxxxxx> ...  User unknow 

    <aab@xxxxxxxxxx> ...  User unknow

    .....

    And continue with all letters and numbers trying to obtaing the valid
address in our domain !!!

    Looking with a sniffer, the software try this:

    telnet XXX.XXX.XXX:XXX   25
    220 localhost ESMTP Sendmail 8.10.2/8.10.2; Thu, 12 Dec 2002 11:33:34
-0300
    HELO lolo.com
    250 vhosts.montevideo.com.uy Hello localhost [127.0.0.1], pleased to
meet you
    MAIL FROM:<lolo@xxxxxxxx>
    250 2.1.0 <lolo@xxxxxxxx>... Sender ok
    RCPT TO:<aaa@xxxxxxxxxx>
    250 2.1.5 <aaa@xxxxxxxxxx>... Recipient ok
    RCPT TO:<aab@xxxxxxxxxx>
    250 2.1.5 <aab@xxxxxxxxxx>... Recipient ok
    550 5.1.1 <aab@xxxxxxxxxx>... User unknown

	and so on !!!

    Any idea to detect this tactics?, how can I filter this ?

Víctor.