-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Could be fishing for SMTP servers to SPAM from, or they might be looking for SMTP servers to brute force email addx's from (more likely the first if there is just one log entry).
11:35:42 24.138.25.155 MAIL FROM - 250 - this is the envelope FROM addx. Reply is 250 or OK 11:35:42 24.138.25.155 RCPT TO - 550 - this is the envelpe TO addx. Reply is 550 or ERROR 11:35:42 24.138.25.155 QUIT - 0 - this is a the remote user ending his session. Reply 0 success, or server is disconnecting. http://www.ietf.org/rfc/rfc0821.txt A lot of people will use VRFY or RCPT commands to enumerate email accounts on a server. If possible you should disable these commands, our SMTP server will accept any message, then bounce it back to the user later, this makes account enum very difficult. Ben Timby Webexcellence PH: 317.423.3548 x23 TF: 800.808.6332 x23 FX: 317.423.8735 [EMAIL PROTECTED] www.webexc.com - -----Original Message----- From: Sam Thompson [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 13, 2002 7:17 AM To: ActiveServerPages Subject: [ot] IIS SMTP Logfile entry while trying to debug my app I found this in my SMTP logfile, can anyone tell me what it means? 11:35:42 24.138.25.155 MAIL FROM - 250 11:35:42 24.138.25.155 RCPT TO - 550 11:35:42 24.138.25.155 QUIT - 0 ...the IP address comes from: Access Cable Television (NETBLK-ACCESS-BLK1) 190 Victoria Rd Dartmouth, Nova Scotia B2Y 4A4 CA I know that IP address shouldnt be messing with my SMTP server!! Cheers Sam Thompson - ---------------------------------------------- 2cs Communications Ltd http://www.2cs.com [EMAIL PROTECTED] T: 01473 622263 F: 01473 622515 - ----------------------------------------------- - --- You are currently subscribed to activeserverpages as: [EMAIL PROTECTED] To unsubscribe send a blank email to %%email.unsub%% -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.4 iQA/AwUBPVk0ifnby1cCm2Q8EQIihACcCg4VCkiBNoKFsgG6fGr7N5KI8I4AoJ3e Ufc6v4T+QVtEOhFi9FxQ9CQ8 =1D3o -----END PGP SIGNATURE----- --- You are currently subscribed to activeserverpages as: [email protected] To unsubscribe send a blank email to [EMAIL PROTECTED]
