From owner-freebsd-isp Mon Dec 14 10:57:10 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA25889 for freebsd-isp-outgoing; Mon, 14 Dec 1998 10:57:10 -0800 (PST) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from Rigel.orionsys.com (rigel.orionsys.com [205.148.224.9]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA25882 for ; Mon, 14 Dec 1998 10:57:08 -0800 (PST) (envelope-from dbabler@Rigel.orionsys.com) Received: from localhost (dbabler@localhost) by Rigel.orionsys.com (8.8.8/8.8.8) with ESMTP id KAA04151; Mon, 14 Dec 1998 10:56:24 -0800 (PST) (envelope-from dbabler@Rigel.orionsys.com) X-Envelope-Recipient: Date: Mon, 14 Dec 1998 10:56:23 -0800 (PST) From: David Babler To: Kevin Day cc: freebsd-isp@FreeBSD.ORG Subject: Re: sendmail morons In-Reply-To: <199812130603.AAA14915@home.dragondata.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sun, 13 Dec 1998, Kevin Day wrote: > > Somehow, we're on some spam software's list of open relays, I think. We > aren't open to relaying, but people sure try. > > I'm guessing this is a bug in the software, but... when it can't relay, it > leaves the connection open, then goes and tries again, and again..... > > root 14170 0.0 1.2 636 736 ?? I 11:47PM 0:00.02 sendmail: server guy78@van-wa1-17.ix.netcom.com [205.184.177.49] cmd read (sendmail) In addition to cutting down the delay time and blocking the IP range as others have suggested, this is coming from a Netcom dialup in Vancouver, Washington. There aren't all THAT many dialup ports there, so finding the clueless moron won't be difficult - call Netcom and report a network security problem and DoS (which this is) and have the bozo nuked. -Dave To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message