Security Incidents mailing list archives

Re: FW: Postmaster notify: User unknown


From: "Jay D. Dyson" <jdyson () TREACHERY NET>
Date: Mon, 18 Dec 2000 23:17:05 -0800

-----BEGIN PGP SIGNED MESSAGE-----

On Tue, 19 Dec 2000, Paul Snedden wrote:

This mail appeared in my Inbox last Friday morning.  I present this unto
you all for your evaluation and recommendation.  I believe an intruder
has accessed my email server for their own purposes.  Am I correct?

        Looks like some bottom-feeding spammer tried to use your mail
system as a third-party relay.  Worse, it looks like the attempt was
successful.  You're probably going to get some pretty rabid hate mail from
the victims of the spam run soon, if not inclusion in the ORBS database.

        If you use Berkeley sendmail, update your relay ruleset.  You can
also switch MTAs by going with Qmail (http://www.qmail.org) or Postfix
(http://www.porcupine.org/postfix-mirror/start.html).  Your call.

- -Jay

   (                                                            ______
   ))   .-- "There's always time for a good cup of coffee" --.   >===<--.
 C|~~| (>------- Jay D. Dyson -- jdyson () treachery net -------<) |   = |-'
  `--'  `------ ...You can have my absence of faith... ------'  `-----'

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: E-mail me for my PGP Public Key.

iQCVAwUBOj8LdtCClfiU/BIVAQGQLQP9GKy+j3LyheGTv4e8WNx+0O6SKyzRNQkk
cVAk04pQkny2BzbYQ/dMxol9+So7CJu3aUJxZsU/lBkQWHGzZ2ZJdVQszv9qXOCJ
4//hwnadETr9wRKB8XypbEEMU4zgnK+k2aWxu3JVI3FxtvEsIrL4HArRivPfhNMQ
M2Ew3wue8/I=
=dlJ2
-----END PGP SIGNATURE-----


Current thread: