On Sun, 19 Nov 2000, Alex Pennace wrote:
> The story I got so far is ORBS tested your machine and found it to be
> an open relay. You fixed it and ORBS tested you again. Meanwhile there
> were isolated connection attempts from Romania and a system crash you
> haven't firmly correlated to anything else.
>
The hackers read ORBS data base called by its "insecure hosts"
and apply to break hosts direclty from list!
The ORBS insecure hosts' data base is possible to read for all,
but I think logic, that should be first of all for administator
of indicated host, and when they made nothing to improve security,
then could be disscused to inform about such host widely.
Also answer the question why, the hackers finished with proofs,
when I have blocked complete access to my host for ORBS?
And why I'm existing still in data base of insecure hosts,
when my host is already secure and works on recommended software
(qmail, tcpserver)? I'm existing, because I let me to request
to finish scanning smtp my host and I'm established by ORBS
as "bad"?
I think, that Internet's societies should be sensitive for
all organization on Net, wich gives itself the privileges
to say where is correct and where is incorect.
Best Wishes
Piotr
---
Piotr Kasztelowicz <[EMAIL PROTECTED]>
[http://www.am.torun.pl/~pekasz]
