From owner-freebsd-security Sun Jul 15 9:53:37 2001 Delivered-To: freebsd-security@freebsd.org Received: from aldan.algebra.com (aldan.algebra.com [216.254.65.224]) by hub.freebsd.org (Postfix) with ESMTP id 6694437B401; Sun, 15 Jul 2001 09:53:33 -0700 (PDT) (envelope-from mi@aldan.algebra.com) Received: from aldan.algebra.com (localhost [127.0.0.1]) by aldan.algebra.com (8.11.4/8.11.4) with ESMTP id f6FGqcO75324; Sun, 15 Jul 2001 12:52:42 -0400 (EDT) (envelope-from mi@aldan.algebra.com) Message-Id: <200107151652.f6FGqcO75324@aldan.algebra.com> Date: Sun, 15 Jul 2001 12:52:37 -0400 (EDT) From: Mikhail Teterin Subject: Re: FYI: mx2.FreeBSD.org listed by ORBS To: mark@grondar.za Cc: admins@freebsd.org, security@freebsd.org In-Reply-To: <200107150758.f6F7wLq99891@grimreaper.grondar.za> MIME-Version: 1.0 Content-Type: TEXT/plain; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On 15 Jul, Mark Murray wrote: > Don't use ORBS. ORBS is DEAD. Yeah, I figured... Well, I have not receive an announcement regarding this -- and orbs usage is an option in the stock sendmail.mc. Does this warrant a "security advisory"? Because ORBS' misbehavior may cause someone, who pushes the ORBS-knob in sendmail.mc to stop getting some e-mail -- it did cause me... Thanks! -mi >> I stopped getting CVS-commit messages and other FreeBSD stuff >> and checked the maillog... >> >> Jul 15 00:17:21 corbulon sendmail[3955]: f6F4HKW03955: >> ruleset=check_relay, arg1=mx2.freebsd.org, arg2=216.136.204.119, relay=mx2.freebsd.org [216.136.204.119], reject=550 5.7.1 216.136.204.119 is a spamsource; see http://lookup.orbs.org/verify.php3?address=216.136.204.119 >> >> Indeed: >> >> root@corbulon:/etc/mail (109) nslookup 119.204.136.216.spamsources.orbs.org >> Server: localhost.video-collage.com >> Address: 127.0.0.1 >> >> Non-authoritative answer: >> Name: 119.204.136.216.spamsources.orbs.org >> Address: 127.0.0.2 >> >> root@corbulon:/etc/mail (110) nslookup 119.204.136.216.spamsource-netblocks.orbs.org >> Server: localhost.video-collage.com >> Address: 127.0.0.1 >> >> Non-authoritative answer: >> Name: 119.204.136.216.spamsource-netblocks.orbs.org >> Address: 127.0.0.2 >> >> I'm probably not the first to report this, but... What's worse, the >> ORBS' web-site is down... -- |\__-----__/| _____/ ::::: :::\_____ '__--( ::::::::..::)--__` -mi If you have a / _- \/ :::::::\/ -_ serious knowledge / / :. .::::\ \ about computers -- | ::::::::::::| Ok, let's say you broke keep it in a secret! _|/ ::::____::\|_ the wall with your head "Rules of dating", / /:::::/:_::\::\:.\ What are you going to 'Playboy', ? 1994 | :| ..:(_/ \::|::|::| do in the next cell? | :|:::::. ::|: |::|.:| Stanislaw J. Lec \ |:: :::_/::/: :|:/ ((___\____\____/___/___)) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message