Hello all, I'm getting these reports in the log files daily. "About to execute command 'relayok ..." etc. I'm wondering if anyone else is getting these and what the threat level is. ---------
Oct 20 04:50:05 ns2 sendmail[26397]: k9K9o3Tj026397: from=<[EMAIL PROTECTED]>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=ask-soft.rmt.ru [81.13.115.234] Oct 20 04:50:14 ns2 mimedefang-multiplexor[2563]: Starting slave 9 (pid 26411) (3 running): About to execute command 'relayok 212.235.233.116 [212.235.233.116] ' Oct 20 04:50:14 ns2 mimedefang-multiplexor[2563]: Starting slave 4 (pid 26415) (4 running): About to execute command 'relayok 212.235.233.116 [212.235.233.116] ' Oct 20 04:50:14 ns2 mimedefang-multiplexor[2563]: Starting slave 3 (pid 26417) (5 running): About to execute command 'relayok 212.235.233.116 [212.235.233.116] ' Oct 20 04:50:14 ns2 mimedefang.pl[22526]: RELAY: <212.235.233.116> <[212.235.233.116]> Oct 20 04:50:14 ns2 mimedefang-multiplexor[2563]: Starting slave 7 (pid 26418) (6 running): About to execute command 'relayok 212.235.233.116 [212.235.233.116] ' Oct 20 04:50:14 ns2 mimedefang.pl[25692]: RELAY: <212.235.233.116> <[212.235.233.116]> Oct 20 04:50:14 ns2 mimedefang.pl[25692]: RELAY: <212.235.233.116> <[212.235.233.116]> Oct 20 04:50:14 ns2 mimedefang.pl[22526]: RELAY: <212.235.233.116> <[212.235.233.116]> Oct 20 04:50:16 ns2 mimedefang.pl[22526]: helo: [212.235.233.116] (212.235.233.116) said "helo lilijana" Oct 20 04:50:16 ns2 mimedefang.pl[22526]: filter_helo rejected helo lilijana -- Dave Helton, Senior Systems Engineer Hughes Network Technologies 2407 - 40th Street Moline, IL 61265 (309) 743-2130 x109 _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
