On 08/01/03 at 17:34 -0700, Matthew Hill opined:
> I am getting a ton of entries in the log. They come from everywhere
> going to every where. How are they doing it? And more important how
> do i stop it? here is a little clip of the logs. These just keep on
> going.
It's a little difficult to see what's going on since your log snippet only
shows pieces of several transactions. It would be better to show us all the
entries associated with one or two transactions.
> It seems to accept mail from these people then forward them to the
> reciepient matthew
The definition of an open relay. Do you have 'Relay for Clients Only'
enabled in your SMTP settings? If not, you're an open relay you've got scum
sucking spammers using you to propagate their spewage.
> 07:56:27 2 SYSTEM [S.0003116717] S.0003116717 1+0 From:[EMAIL PROTECTED]
> 07:56:27 2 SYSTEM [S.0003116719] <FF1AF8DB-
> [EMAIL PROTECTED]>
> 1+0 From:[EMAIL PROTECTED]
> 07:56:27 2 SYSTEM [S.0003116718] S.0003116718 1+0 From:[EMAIL PROTECTED]
> 07:56:27 2 SMTP-618([218.70.150.23]) {S.0003116707} received, 4445 bytes
> 07:56:27 2 SMTP-990(163.COM) [S.0003116694] sent, 1208 bytes
> 07:56:28 2 SMTP-928([218.70.138.210]) {S.0003116720} received, 5445 bytes
> 07:56:28 2 SYSTEM [S.0003116707] S.0003116707 1+0 From:[EMAIL PROTECTED]
> 07:56:28 2 SYSTEM [S.0003116720] S.0003116720 1+0 From:[EMAIL PROTECTED]
> 07:56:28 2 SYSTEM [S.0003116679] deleted
> 07:56:28 2 SYSTEM(SMTP) [S.0003116694] sent to (163.COM)bd
> 07:56:29 2 SMTP-928([218.70.138.210]) {S.0003116721} received, 5443 bytes
> 07:56:30 2 SYSTEM [S.0003116721] S.0003116721 1+0 From:[EMAIL PROTECTED]
> 07:56:30 2 SMTP-991(163.net) [S.0003116692] sent, 5309 bytes
> 07:56:30 2 SYSTEM [S.0003116128] deleted
> 07:56:30 2 SYSTEM(SMTP) [S.0003116692] sent to (163.net)hockweber
> 07:56:31 2 SMTP-928([218.70.138.210]) {S.0003116723} received, 5466 bytes
> 07:56:32 2 SYSTEM [S.0003116723] S.0003116723 1+0 From:[EMAIL PROTECTED]
> 07:56:33 2 SMTP-928([218.70.138.210]) {S.0003116724} received, 5418 bytes
> 07:56:33 2 SMTP-992(premaonline.com) [S.0003116695] sent, 5243 bytes
> 07:56:33 2 SMTP-994([216.135.186.68]) [S.0003116698] sent, 6151 bytes
> 07:56:33 2 SYSTEM [S.0003116724] S.0003116724 1+0 From:[EMAIL PROTECTED]
> 07:56:33 2 SMTP-993(xtra.co.nz) [S.0003116697] sent, 5299 bytes
> 07:56:33 2 SYSTEM [S.0003116682] deleted
--
Christopher Bort | [EMAIL PROTECTED]
Webmaster, Global Homes | [EMAIL PROTECTED]
<http://www.globalhomes.com/>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
