Wasn't it SIMS Discussions [EMAIL PROTECTED] who once said... >Date: Thu, 29 Jan 2004 11:39:14 -0500 >From: Bill Cole <[EMAIL PROTECTED]> >Subject: Re: SIMS spam used > > >At 6:25 AM -0800 1/29/04, Adri� Vidal romero >imposed structure on a stream of electrons, >yielding: >>Hello got my SIMS mailserver up and running for >>some time, and since a few days ago i find a lot >>of messages sent without authoritation. >>My SIMS machine runs as POP server and SMTP only >>for internal accounts, relay is not permited. >>Someone can help me stopping this spammer using >>my server.
[snip] >That's just SIMS reading in queued messages at >startup, so it does not say much about how your >machine is being abused. If you have the logs for >the arrival of that message, it might provide >more clues. > >The basic rules for keeping SIMS from being abused as a relay are: > >1. Use the latest (last) version: 1.8b9d14 >2. Make sure 'relay for clients only' is checked. >3. Watch for password-guessing attacks against POP3 or SMTP AUTH. Out of curiosity, what am I looking for in the logs to indicate a "password-guessing" attack? TIA, ================================================ | Doug Starkey | | Network Administrator | | Pecan Deluxe Candy Company | | 2570 Lone Star Drive | | Dallas, TX 75212-6308 | | e-mail: [EMAIL PROTECTED] | | voice: 214-631-3669 Ext. 108 | | fax: 214-631-5833 | ================================================ ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
