From owner-freebsd-isp Mon May 25 08:51:38 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA09336 for freebsd-isp-outgoing; Mon, 25 May 1998 08:51:38 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from germanium.xtalwind.net (germanium.xtalwind.net [205.160.242.5]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA09273 for ; Mon, 25 May 1998 08:51:01 -0700 (PDT) (envelope-from jack@germanium.xtalwind.net) Received: from localhost (jack@localhost) by germanium.xtalwind.net (8.9.0/8.9.0) with SMTP id LAA11626; Mon, 25 May 1998 11:50:31 -0400 (EDT) Date: Mon, 25 May 1998 11:50:31 -0400 (EDT) From: jack To: Karl Pielorz cc: isp@FreeBSD.ORG Subject: Re: SMTP Relay probing - Should I follow up - advice? In-Reply-To: <35695091.FE0ACF50@tdx.co.uk> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, 25 May 1998, Karl Pielorz wrote: > I've just checked through my morning security logs, and suprise, suprise our > entire address space was scanned again lastnight for SMTP relays... Theres > loads of firewall logs for SMTP connects to machines we don't allow SMTP to, > and on the machines we do allow SMTP to - in the logs are loads of sendmail > catches for 'Relaying Unavailable' (the message we send to people trying to > relay)... > > My question is - I have the IP address these came from, they are a Spamming > Company by the look of it, and to be honest I'm sick of this sort of > thing... > > Is it worth me mailing the people? Mail probably would probably be ignored if they're a spam factory. A small tactical nuclear weapon might be a nice touch though. :) > - Or should I just be grateful we weren't > used as a relay and let them be? With as much evidence as you have I wouldn't ignore it. Check with a lawyer and/or the authorities about what recourse you may have against them. > I'm just annoyed a company that obviously has set out to specialise in > spam/electronic mailing lists doesn't even use it's own servers to send the > damned stuff out... Using their own servers only works a few times. Once they end up everyone's spam filters they're out of business with their own addresses and hijacking other peoples resources is the only way they can spew their garbage. > Annoyed... I'm sure. As a potential victim of their spam let me say thank you to you for not acting as a relay for them. -------------------------------------------------------------------------- Jack O'Neill Systems Administrator / Systems Analyst jack@germanium.xtalwind.net Crystal Wind Communications, Inc. Finger jack@germanium.xtalwind.net for my PGP key. PGP Key fingerprint = F6 C4 E6 D4 2F 15 A7 67 FD 09 E9 3C 5F CC EB CD enriched, vcard, HTML messages > /dev/null Mail from netcom.com blocked until they stop relaying SPAM -------------------------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message