From owner-freebsd-isp Thu May 20 8:20:32 1999 Delivered-To: freebsd-isp@freebsd.org Received: from runner.jjsoft.com (jahanur.intur.net [206.97.149.64]) by hub.freebsd.org (Postfix) with ESMTP id 954E8152A2 for ; Thu, 20 May 1999 08:20:27 -0700 (PDT) (envelope-from jahanur@jjsoft.com) Received: from jjsoft.com ([206.97.159.66]) by runner.jjsoft.com (8.9.0/8.9.0) with ESMTP id KAA25779; Thu, 20 May 1999 10:20:16 -0500 (CDT) Message-ID: <37442907.E86D0659@jjsoft.com> Date: Thu, 20 May 1999 10:23:52 -0500 From: Jahanur R Subedar Organization: J & J Software Solutions,www.jjsoft.com X-Mailer: Mozilla 4.5 [en] (Win95; I) X-Accept-Language: en MIME-Version: 1.0 To: Erin Fortenberry Cc: freebsd-isp@FreeBSD.ORG Subject: Re: 911 sombody using our sendmail server. References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I called them and they are saying they dont nothing what is going on. at all. They told me that ip address is their mail servers IP address. And their System Admin is out on lunch. Buz.net told me that they have a antispamming policy. and asking me if can get the content of the e-mail being sent. How can I get the e-mail content. Please Help Jahanur Erin Fortenberry wrote: > What version of sendmail? Does this person have an account on this system? > I'd say first, block his access to your system with the firewall rules, then > work out your sendmail problems. Get ahold of the people at bux.net: > > http://www.networksolutions.com/cgi-bin/whois/whois/?STRING=buz.net > > and tell them what is going on. Normally the IPS are good about helping with > this kind of thing. > > Erin > > mailto:kahn@unet.tm > http://www.fortenberry.net > > "Can i dial 1-255-255-255255 and make every phone in the world ring?" > > -- Tanuki > > -----Original Message----- > From: Jahanur R Subedar [mailto:jahanur@jjsoft.com] > Sent: Thursday, May 20, 1999 8:02 AM > To: freebsd-isp@freebsd.org > Subject: 911 sombody using our sendmail server. > > HI, > I need some help ver fast to catche a hacker. > Here is the signature. > bash-2.01$ ps -ax | grep sendmail > 121 ?? Is 0:03.00 sendmail: accepting connections on port 25 > (sendmail. > 25508 ?? I 0:00.02 sendmail: server bnetnt1.buz.net > [204.216.44.4] child > 25509 ?? S 0:03.43 sendmail: JAA25509 bnetnt1.buz.net > [204.216.44.4]: DA > I need to know how can I catche this person and ban him. > Please help me. Or what more do I need for evidence. > > Jahanur > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message