As a side note. I just checked and port 10000 is not listening on the server.
-----Original Message----- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Friday, June 18, 2004 9:49 AM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] Possible Dumaru attack >I am being blacklisted for possibly having the worm Dumaru on my server. Who is blacklisting you? Your IP seems clean. >I have read Symantec's synopsis on Dumaru and don't find any of the files >or processes they list associated with Dumaru. Is there anything else I >should be looking for? dnsbl says port 10000 is open. I have just blocked >10000 to and from my email server. Can you folks think of anything else I >should be looking at or for? Did you check to see if port 10000 was indeed open ("netstat -an | find "LISTEN" will show ports that are open; look for 10000 in there)? Was the outside world able to connect to port 10000 on your server before, or were you just blocking outgoing connections to port 10000 and/or local network connections to port 10000? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
