I was listed by dnsbl. The port was open in both directions. I have applied an inbound and outbound block for all ip's on that port to my email server. If it's open on the server, what is the easiest way to close it? If you go to http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=66.231.32.24 and do the lookup on that address you will see what it's reporting to other mail servers.
-----Original Message----- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Friday, June 18, 2004 9:49 AM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] Possible Dumaru attack >I am being blacklisted for possibly having the worm Dumaru on my server. Who is blacklisting you? Your IP seems clean. >I have read Symantec's synopsis on Dumaru and don't find any of the files >or processes they list associated with Dumaru. Is there anything else I >should be looking for? dnsbl says port 10000 is open. I have just blocked >10000 to and from my email server. Can you folks think of anything else I >should be looking at or for? Did you check to see if port 10000 was indeed open ("netstat -an | find "LISTEN" will show ports that are open; look for 10000 in there)? Was the outside world able to connect to port 10000 on your server before, or were you just blocking outgoing connections to port 10000 and/or local network connections to port 10000? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
