On 08/16/02 at 21:04, Warren Michelsen wrote:
> Every day recently, one of my SIMS servers has shown repeated
> attempts to relay through my machine. Some days, over half the log is
> just repeated attempts by this same host to relay through my SIMS box:
>
>
> 11:43:14 3 SMTP-995(Tlw) Failed to verify. Real address is
> [216.67.213.166:57687]
> 11:43:15 1 SMTP-995([216.67.213.166]) SPAM? Recipient '<[EMAIL PROTECTED]>'
> rejected: relaying to [158.73.247.5] is not allowed
> 11:45:55 3 SMTP-999(Kcznqu) Failed to verify. Real address is
> [216.67.213.166:57958]
> 11:45:56 1 SMTP-999([216.67.213.166]) SPAM? Recipient
'<[EMAIL PROTECTED]>'
> rejected: relaying to [64.4.55.7] is not allowed
> 11:47:42 3 SMTP-001(Eonbe) Failed to verify. Real address is
> [216.67.213.166:58034]
> 11:47:42 1 SMTP-001([216.67.213.166]) SPAM? Recipient
'<[EMAIL PROTECTED]>'
> rejected: relaying to [64.4.42.7] is not allowed
> 11:50:31 3 SMTP-005(Uthloykw) Failed to verify. Real address is
> [216.67.213.166:58114]
> 11:50:32 1 SMTP-005([216.67.213.166]) SPAM? Recipient '<[EMAIL PROTECTED]>'
> rejected: relaying to [64.157.4.85] is not allowed
>
> I finally got tired of waiting for the dimwit to realize he isn't
> sending any mail through my server and go away. It hasn't happened.
>
> Are these people *that* stupid?
What makes you think that the spammer ever looks at his own logs? He may just
figure that denied relays are part of the process and just ignore them. In the
meantime, you should blacklist 216.67.213.166.
--
Christopher Bort | [EMAIL PROTECTED]
Webmaster, Global Homes | [EMAIL PROTECTED]
<http://www.globalhomes.com/> | PGP public key available on request
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
