I am being blacklisted for possibly having the worm Dumaru on my server.
Who is blacklisting you? Your IP seems clean.
I have read Symantec's synopsis on Dumaru and don't find any of the files or processes they list associated with Dumaru. Is there anything else I should be looking for? dnsbl says port 10000 is open. I have just blocked 10000 to and from my email server. Can you folks think of anything else I should be looking at or for?
Did you check to see if port 10000 was indeed open ("netstat -an | find "LISTEN" will show ports that are open; look for 10000 in there)? Was the outside world able to connect to port 10000 on your server before, or were you just blocking outgoing connections to port 10000 and/or local network connections to port 10000?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
