On Sat, Jan 10, 2004 at 12:38:22AM +0100, Henrik Nordstrom wrote: > On Fri, 9 Jan 2004, Payal Rathod wrote: > > > Can you please explain what you mean by that? > > That your blacklist maybe does not match the server accessed while > browsing the hotmail service, only the server accessed on the first access > when logging in to the hotmail account.
Now I am blocking from 09:21-09:23 with domains, dstdomain .yahoo.com .hotmail.com .rediffmail.com .indiatimes.com .rediff.com .msn.com But after say 2 mins of inactivity I get "acces denied" error. Is this normal? Part of acces.log is given below. This was at 09:24. 1073706785.713 285 192.168.10.11 TCP_MISS/200 5246 POST http://email.indiatimes.com/cgi-bin/demail.cgi - DIRECT/203.199.93.4 text/html 1073706786.072 359 192.168.10.11 TCP_MISS/200 694 GET http://203.199.70.247/cgi-bin/adceptdelivery.cgi? - DIRECT/203.199.70.247 text/html 1073706786.602 273 192.168.10.11 TCP_MISS/200 12383 GET http://203.199.70.247/cgi-images/planetm/2612/loc468.gif - DIRECT/203.199.70.247 image/gif 1073706785.713 285 192.168.10.11 TCP_MISS/200 5246 POST http://email.indiatimes.com/cgi-bin/demail.cgi - DIRECT/203.199.93.4 text/html 1073706786.072 359 192.168.10.11 TCP_MISS/200 694 GET http://203.199.70.247/cgi-bin/adceptdelivery.cgi? - DIRECT/203.199.70.247 text/html 1073706786.602 273 192.168.10.11 TCP_MISS/200 12383 GET http://203.199.70.247/cgi-images/planetm/2612/loc468.gif - DIRECT/203.199.70.247 image/gif 1073706800.516 731 192.168.10.11 TCP_MISS/200 5178 POST http://email.indiatimes.com/cgi-bin/demail.cgi - DIRECT/203.199.93.4 text/html 1073706800.906 390 192.168.10.11 TCP_MISS/200 2462 GET http://203.199.70.247/cgi-bin/adceptdelivery.cgi? - DIRECT/203.199.70.247 text/html 1073706801.449 184 192.168.10.11 TCP_MISS/200 7519 GET http://203.199.70.247/cgi-images/as/june9/sahara_banner.swf - DIRECT/203.199.70.247 application/x-shockwave-flash Thanks a lot. Regards, -Payal -- For GNU/Linux Success Stories and Articles visit: http://payal.staticky.com
