Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 20 May 1999 10:23:52 -0500
From:      Jahanur R Subedar <jahanur@jjsoft.com>
To:        Erin Fortenberry <erinf@lusardi.com>
Cc:        freebsd-isp@FreeBSD.ORG
Subject:   Re: 911 sombody using our sendmail server.
Message-ID:  <37442907.E86D0659@jjsoft.com>
References:  <AFB0749029D0D211AD3900902728125103A83D@MAIL>

next in thread | previous in thread | raw e-mail | index | archive | help
I called them and they are saying they dont nothing what is going on. at all.
They told me that ip address is their mail servers IP address.
And their System Admin is out on lunch.
Buz.net told me that they have a antispamming policy.
and asking me if can get the content of the e-mail being sent.
How can I get the e-mail content.
Please Help

Jahanur



Erin Fortenberry wrote:

> What version of sendmail? Does this person have an account on this system?
> I'd say first, block his access to your system with the firewall rules, then
> work out your sendmail problems. Get ahold of the people at bux.net:
>
> http://www.networksolutions.com/cgi-bin/whois/whois/?STRING=buz.net
>
> and tell them what is going on. Normally the IPS are good about helping with
> this kind of thing.
>
> Erin
>
> mailto:kahn@unet.tm
> http://www.fortenberry.net
>
> "Can i dial 1-255-255-255255 and make every phone in the world ring?"
>
> -- Tanuki
>
> -----Original Message-----
> From: Jahanur R Subedar [mailto:jahanur@jjsoft.com]
> Sent: Thursday, May 20, 1999 8:02 AM
> To: freebsd-isp@freebsd.org
> Subject: 911 sombody using our sendmail server.
>
> HI,
> I need some help ver fast to catche a hacker.
> Here is the signature.
> bash-2.01$ ps -ax | grep sendmail
>   121  ??  Is     0:03.00 sendmail: accepting connections on port 25
> (sendmail.
> 25508  ??  I      0:00.02 sendmail: server bnetnt1.buz.net
> [204.216.44.4] child
> 25509  ??  S      0:03.43 sendmail: JAA25509 bnetnt1.buz.net
> [204.216.44.4]: DA
> I need to know how can I catche this person and ban him.
> Please help me. Or what more do I need for evidence.
>
> Jahanur
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?37442907.E86D0659>