okay thanks. making sure i put it in right. /dsl.*bellsouth\.net/ 554 ACL subscriber
----- Original Message ----- From: "Len Conrad" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 03, 2003 11:48 AM Subject: [IMGate] Re: whats this caused by ? > > > >What kind of email is causing this ? crack attempt ? fubared mailserver ? > > the latter > > >coming from a bellsouth.net ip > > The South Shall Lose Again. /dsl.*bellsouth/ is rotten with mom'n'pop > spammers, open relays, open proxies, worm-infections. Not that the are > any different from any subscriber network. They'er all toxic. > > mta_clients_subscriber.regexp > > >Postfix SMTP server: errors from unknown[68.156.91.197] > >Out: 220 spamcop.wirelesscommunitynetworks.com - ESMTP - Postfix - Attn: UCE > > trespassers will be pursued. > >In: POST / HTTP/1.1 > > looks like an HTTP proxy probe > > >Out: 502 Error: command not implemented > > nope, we speak SMTPese only > > >In: Content-type: application/octet-stream > > putting an SMTP header at the envelope stage. > > Len > > >
