possible SMTP attack

From: Olga (olga_at_urbantimes.net)
Date: 07/31/04

  • Next message: Alexander Dalloz: "Re: virus/worms killing a network..." 
    Date: Sat, 31 Jul 2004 13:26:08 -0500 (CDT)
To: fedora-list@redhat.com

    Hi,

    I got this message in the logwatch sent to root:

    Client quit before communicating:
        222.183.141.253 : 1 Time(s)

    **Unmatched Entries**
       [222.183.141.253]: possible SMTP attack: command=AUTH, count=6: 1 Time(s)

    What does it mean? How can I protect my server against SMTP attacks?

    Thank you.

    Olga 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Alexander Dalloz: "Re: virus/worms killing a network..."

    Relevant Pages

    • Re: TALPA - a threat model? well sorta.
      ... Assuming it wants to protect against root: ... But you need some LSM like protections to be able to protect the file ... the integrity of the file scanner against root. ...
      (Linux-Kernel)
    • Re: [malware-list] TALPA - a threat model? well sorta.
      ... I honestly don't think we should worry about root. ... scanner for file servers ... "how do we protect the file scanner", ... Complete rootkit protection is a whole other area not ...
      (Linux-Kernel)
    • Re: TALPA - a threat model? well sorta.
      ... I honestly don't think we should worry about root. ... Sure, if the AV scanner ... But you need some LSM like protections to be able to protect the file ...
      (Linux-Kernel)
    • Re: Regarding sudo
      ... A normal user cannot damage the critical system files. ... etc.) The root account is capable of causing great damage ... Protect system backups. ...
      (comp.os.linux.setup)
    • Re: TALPA - a threat model? well sorta.
      ... protections against maliciously attacking programs be they root or not. ... happen is that the scanner is going to scan the trojan.rpm when yum ... Stop thinking this is an LSM or as a new security model. ... But you need some LSM like protections to be able to protect the file ...
      (Linux-Kernel)