RE: [cobalt-users] I think my server is used for spam..

["Chuck Lewis" <clewis@xxxxxxxxxx>]

On Saturday, August 30, 2003 3:56 PM, Henrik wrote:
 
>Can anyone tell me what is happening?
>
>My admin users mailbox has recieved +7000 mail today from Mail Delevery
>Subsystem. In the mail there is a line telling that the email could not be
>delivered because my IP is blocked using bl.spamcop.net.
>
>In /var/log/messages there are a huge number of lines like this.
>
>Aug 30 22:16:58 ns1 named[1256]: lame server resolving 'bellsuth.net' (in
>'bellsuth.net'?): 139.76.164.1#53
>Aug 30 22:17:17 ns1 named[1256]: lame server resolving 'n64rocks.com' (in
>'n64rocks.com'?): 199.191.128.105#53
>
>In the last 24 hours it almost has gone crazy with all thees "lame server
>resolving" lines..

Henrik

My log shows clean and out Qube 3 is locked down pretty tightly (Thanks
Gerald !) but here is what I have been getting in my System Check alert
emails for almost a week now:


Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Sep  2 03:54:23 leeqube2 sendmail[12719]: h827nNu12719: collect: premature
EOM: Connection reset by imf01aec.mail.bellsouth.net

I've been getting tons of these. I think Gerald told me these are someone
trying, unsuccessfully, to use us for spam.

Chuck