[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] spam exploits



By saying /24, do you mean port 24?

If so, looks like I have a little work to do re: blocking various
IP/domains...the "for a list of know spammers have a look at bruces site
blocked.txt" looks like a good start as a reference.

Manny

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Dan Kriwitsky
Sent: Friday, April 11, 2003 3:35 PM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: RE: [cobalt-users] spam exploits


> This is the last entry of many, from my mail log today:
>
> Apr 11 12:33:18 www sendmail[8267]: h3BJXF508267:
> from=<falk_grosswig@xxxxxxx>, size=1097, class=0, nrcpts=1,
> msgid=<000003e46fa5$00003428$000060cb@xxxxxxxxxxxxxxxxxxxxxxxxxxx>,
> proto=SMTP, daemon=MTA, relay=[66.159.211.40]
>
> So I see that relay=66.159.211.69 is the culprit?

Sure looks like it. You shouldn't have opened up an entire /24 to relay.

--
C2003 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.


_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users