[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] Dawn: Possible Open Relay



(Added subject)

> 
> Over the past couple of days have noticed the traffic for a 
> CacheRaq4 at 
> one of our schools is seeing an INSANE amount of traffic.   The 
> administrator there keeps receiving a whole bunch of mail 
> returned mail. 
> (vulnerable SMTP, seems to be "undeliverable" spam).  Having gotten 
> "complaints" from the outside world.  So anybody got any 
> ideas? It's behind 
> a Sonic Wall and the following ports are the only ones that 
> appear to be 
> open, netbios (137,138), telnet and squid (SMTP is opened).  

Test the IP at http://hatcheck.org/proxy to see if you have an open
proxy you don't know about.
Or, you may be able to check it at http://openrbl.org/ to see if it's
already on some DNSBL.

-- 
C2003 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.