Re: [gentoo-user] Open Relay - What Happened?

["Kent Fredric" <kentfredric@gmail.com>]

On 6/29/07, Randy Barlow <randy@electronsweatshop.com> wrote:
> Vladimir Rusinov wrote:
> > You have problems with client restrictions.
> > It is very weird that spammer haven't attacked your server since November.
>
> Thanks for your help Vladimir, I believe my e-mail server is secure now!
>
> --
> Randy Barlow
> http://electronsweatshop.com
>
> But you are a chosen race, a royal priesthood, a holy nation, a people
> for his own possession, that you may proclaim the excellencies of him
> who called you out of darkness into his marvelous light. Once you were
> not a people, but now you are God's people; once you had not received
> mercy, but now you have received mercy. ~1 Peter 2:9-10
>
> --
> gentoo-user@gentoo.org mailing list
>
>


Just be aware bounce-mails are not nessicarily an indication of a
compromised box. Lately some spammers have learn't they can double
their audience and halve their own send rate by putting victim1 as the
"to" address, and victim2 as the "from" field, so that way when
servers send a 'sorry, cant deliver this message'  it bascially acts
as a open-relay-on-bounce ( if theres any doubt, check the headers of
the bounced message, sometimes you'll find your server never touched
it )
-- 
Kent
ruby -e '[1, 2, 4, 7, 0, 9, 5, 8, 3, 10, 11, 6, 12, 13].each{|x|
print "enNOSPicAMreil kdrtf@gma.com"[(2*x)..(2*x+1)]}'
-- 
gentoo-user@gentoo.org mailing list