From owner-freebsd-security Fri Oct 25 12: 8:42 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F2EDE37B401 for ; Fri, 25 Oct 2002 12:08:39 -0700 (PDT) Received: from nebula.wanadoo.fr (ca-sqy-4-114.abo.wanadoo.fr [80.8.57.114]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4F8CB43E6E for ; Fri, 25 Oct 2002 12:08:38 -0700 (PDT) (envelope-from dak@wanadoo.fr) Received: from nebula.wanadoo.fr (localhost [127.0.0.1]) by nebula.wanadoo.fr (8.12.6/8.12.5) with ESMTP id g9PJ9vuM046556; Fri, 25 Oct 2002 21:09:57 +0200 (CEST) (envelope-from dak@nebula.wanadoo.fr) Received: (from dak@localhost) by nebula.wanadoo.fr (8.12.6/8.12.6/Submit) id g9PJ9u0o046555; Fri, 25 Oct 2002 21:09:56 +0200 (CEST) Date: Fri, 25 Oct 2002 21:09:56 +0200 From: =?iso-8859-15?Q?Aur=E9lien?= Nephtali To: "Kevin D. Kinsey, DaleCo, S.P." Cc: security@FreeBSD.ORG Subject: Re: New (to me) apache error... Message-ID: <20021025190956.GA46522@nebula.wanadoo.fr> References: <004101c27c4b$808cae90$fa00a8c0@DaleCoportable> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="3V7upXqbjpZ4EhLz" Content-Disposition: inline In-Reply-To: <004101c27c4b$808cae90$fa00a8c0@DaleCoportable> User-Agent: Mutt/1.5.1i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --3V7upXqbjpZ4EhLz Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Oct 25, 2002 at 12:25:22PM -0500, Kevin D. Kinsey, DaleCo, S.P. wro= te: > Hi, Gentlemen, >=20 > This appeared in my apache error log today. Any thoughts? > Malevolent code entered by a website user, perhaps? >=20 > [Fri Oct 25 08:32:16 2002] [error] [client 24.112.227.167] request > failed: > erroneous characters after protocol string: > CONNECT mx1.mail.yahoo.com:25 / HTTP/1.0 >=20 > Kevin Kinsey >=20 >=20 > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message It looks like a fucking^H^H^H^H^H^H^H^H guy is trying to send spam through = your HTTP server (by doing relay). You have the IP, send a mail at abuse@ of the domain to complain about this. We'll defeat spammerz :) -- Aur=E9lien --3V7upXqbjpZ4EhLz Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.0 (FreeBSD) iD8DBQE9uZcEDNsbHbt8ok8RAqtKAJ96Qm9qP1AdJluR4OqVjvOt9LjX9ACglkxn 7UbqF/webPNwv6ZKLzZzDr4= =ttXi -----END PGP SIGNATURE----- --3V7upXqbjpZ4EhLz-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message