[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] Open Proxy Warning...
- Subject: Re: [cobalt-security] Open Proxy Warning...
- From: Larry Smith <lesmith@xxxxxxxxx>
- Date: Thu, 1 Apr 2004 17:57:27 -0600
- Organization: ECSIS
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
On Thursday 01 April 2004 15:18, Chuck Lewis wrote:
> Hi Folks,
>
> We had a user get a warning and be directed to the following URL:
>
> http://opm.blitzed.org/216.37.48.203
>
> This is the address of our email server and I have no idea what all this
> means. Is this really pointing to the email server or the PC that got it ?
>
> Thanks !
>
> Chuck
Chuck,
This entry means that at some point, the machine with IP address
216.37.48.203 was connected to on a "proxy" port, it accepted the connection
and "relayed" mail back to the Blitzed site - at which time it was listed in
the RBL as an "open" proxy. Looks like the entry has been "pulled" (made
inactive) but you might want to check it out further...
--
Larry Smith
SysAd ECSIS.NET
sysad@xxxxxxxxx