SCOUG-HELP Mailing List Archives

<< Previous Message << >> Next Message >>

Date:	Tue, 30 Apr 2002 01:51:53 PST7
From:	<leganii@surfree.com >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: Re: sendmail hack/relay attempt

Content Type: text/plain

=====================================================
If you are responding to someone asking for help who
may not be a member of this list, be sure to use the
REPLY TO ALL feature of your email program.
=====================================================

> *=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*
> Date: Mon, 29 Apr 2002 19:49:46 PST7
> From: Peter Skye
> To: scoug-help@scoug.com
> Subject: SCOUG-Help: sendmail hack/relay attempt
> --------------------------------------------------------------------
>
>
> At 5:30 this afternoon, speedyscanner@hotmail.com tried to relay through
> my sendmail (mail server) to cnseasky@263.net and managed to SYS3175 my
> sendmail.dll in the process (bounds check).
>
> I've reviewed my sendmail logs (mail.log, sendmail.err) and this appears
> to be the first such attempt by anybody to relay through me.
>
> The subject line contains a hex string followed by two ip addresses.
> >From mail.log:
>
> 02/04/29 05:30:53
> To:
> Subject: 627d1b031b5f79e8a98f26a29f4b4ad5:[IP:IP]
>
> Thought you guys would like to see the above.
>
> I probably should plug in that SMC firewall I bought last year.
>
> - Peter

wonder if it might have any relation to:

http://www.acm.org/technews/articles/2002-4/0429m.html#item12

???

Regards,
Dallas E. Legan II / leganii@surfree.com / dallasii@kincyb.com

Powered by......Lynx, the Internet at hyperkinetic speed.

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"rollin@scoug.com".

=====================================================

Return to [ 30 | April | 2002 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.