I get these from ANY email host that has a MOTD...

On Mon, 28 Nov 2005 14:56:59 -0700
"Chris Moore" <[EMAIL PROTECTED]> wrote:

> 
> Are you sure that the bug is in Ntop rather than AOL? For whatever
> reason ntop is seeing something "funny" in this packet that it thinks
> does not look like SMTP. DO you get this from a lot of domains or just
> AOL?
> 
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
> Of James Lay
> Sent: Monday, November 28, 2005 2:46 PM
> To: Ntop
> Subject: [Ntop] 3rd times a charm
> 
> So I've put this to the list twice...this will be the 3rd and final
> time I submit this.  I think this is a bug in ntop.  Below is the
> result of postfix on this box email someone at AOL:
> 
> Nov 28 14:42:10 homebox ntop[12396]:   **WARNING** Unknown protocol
> (no FTP/SMTP) detected (trojan?) at port 25
> www.slave-tothe-box.net:33387 -> mailin-04.mx.aol.com:25
> [220-rly-yh02.mx.aol.com ESMTP mail_relay_in-yh2.7; Mon, 28 Nov 2005
> 16:42:07 -0500^M 220-America Online (AOL) and its affiliated
> companies do not^M 220-     authorize the use of its proprietary
> computers and computer^M 220-     networks to accept, transmit, ]
> 
> Two points:
> 
> 1.  This is on port 25, yet Ntop says no SMTP 2.  This is a simple
> MOTD type message that Ntop should really be aware of.
> 
> Anywhere else I can send this too?  Apparently nobody on this list is
> a developer or cares about this =D
> 
> Thanks people.
> 
> James
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
> 
> **********************************************************************
> Confidential/Proprietary Note
> 
> The information in this email is confidential and may be legally
> privileged.  Access to this email by anyone other than the intended
> addressee is unauthorized.  If you are not the intended recipient of
> this message, any review, disclosure, copying, distribution,
> retention, or any action taken or omitted to be taken in reliance on
> it is prohibited and may be unlawful.  If you are not the intended
> recipient, please reply to or forward a copy of this message to the
> sender and delete the message, any attachments, and any copies
> thereof from your system.  Thank you. Guardian Mtg Documents, Inc.
> 225 Union Boulevard, Suite 200 Lakewood, CO 80228.
> **********************************************************************
> _______________________________________________ Ntop mailing list
> [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to