[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-security] Portsentry/Logcheck
- Subject: RE: [cobalt-security] Portsentry/Logcheck
- From: "Simon Wilson" <simon@xxxxxxxxxxxxx>
- Date: Fri, 6 Apr 2001 09:50:43 +0100
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
>yep - but the RaQ did it's job and blocked it so your ok
>Hello,
>Below is a snip from Logcheck. I don't have SMPT set up on any of my
virtual
>sites and use my local ISP for sending mail. So, does the message below,
>mean that somebody else is trying to send mail from my server?
>Declan
I get a similar Logcheck snip. Is this guy doing the same thing? If he is
what can I do to stop him as he attempts to do this almost every day.
Mar 30 06:43:26 ns1 sendmail[19040]: f2U5hPu19040: ruleset=check_rcpt,
arg1=<ken.tak@xxxxxxxxxxx>, relay=ppp-209-144-213-245.dialup.pcmagic.net
[209.144.213.245], reject=550 5.7.1 <ken.tak@xxxxxxxxxxx>... Relaying denied
Thanks
Simon