[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] mail attack



----- Original Message ----- 
From: "paul jacobs" <paul@xxxxxxxxxxxxxxxxxx>
To: <cobalt-security@xxxxxxxxxxxxxxx>
Sent: Tuesday, May 20, 2003 10:11 PM
Subject: [cobalt-security] mail attack


> Seem to be getting the below error more and more.... anyone else?
> 
> May 20 14:22:25 ns4 sendmail[14779]: h4KLMOs14778: Truncated MIME 
> Content-Disposition header due to field size (possible attack)
> May 20 14:27:36 ns4 sendmail[15018]: h4KLRZs15017: Truncated MIME 
> Content-Disposition header due to field size (possible attack)
> 
> Any way to stop it or dare I say fix it.
> 
> 
> Best Regards,
> Paul Jacobs /Sr. Network Manager
> http://www.yourwebcentral.com


Same here. I've seen them occasionally for months,
but they've been getting really heavy during the past 
couple of days. Most of the originating IPs seem to be 
open relays or non-US dialup types... so I just check
and block them, as appropriate. I've also discovered
that "truncated MIME" events can be caused by an 
Outlook spyware add-on, called Hotbar.

David Black
Houston, TX