SCOUG-HELP Mailing List Archives

<< Previous Message << >> Next Message >>

Date:	Mon, 29 Apr 2002 19:49:46 PST7
From:	Peter Skye <pskye@peterskye.com >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: sendmail hack/relay attempt

Content Type: text/plain

=====================================================
If you are responding to someone asking for help who
may not be a member of this list, be sure to use the
REPLY TO ALL feature of your email program.
=====================================================

At 5:30 this afternoon, speedyscanner@hotmail.com tried to relay through
my sendmail (mail server) to cnseasky@263.net and managed to SYS3175 my
sendmail.dll in the process (bounds check).

I've reviewed my sendmail logs (mail.log, sendmail.err) and this appears
to be the first such attempt by anybody to relay through me.

The subject line contains a hex string followed by two ip addresses.
>From mail.log:

02/04/29 05:30:53
To:
Subject: 627d1b031b5f79e8a98f26a29f4b4ad5:[IP:IP]

Thought you guys would like to see the above.

I probably should plug in that SMC firewall I bought last year.

- Peter

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"rollin@scoug.com".

=====================================================

Return to [ 29 | April | 2002 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.