Re: SMTP access

From: Gerry Doris (gdoris_at_rogers.com)
Date: 04/07/04

  • Next message: Marķa Viola Deambrosis: "Professional RedHat 7.3 DBase Server randomly gets blocked"
    Date: Wed, 7 Apr 2004 07:39:04 -0400 (EDT)
    To: General Red Hat Linux discussion list <redhat-list@redhat.com>
    
    

    On Tue, 6 Apr 2004, Michael Sullivan wrote:

    > I read my log watch every day for my server PC each time I notice an
    > attempted unauthorized access I run the IP through whois and then I send
    > an email to the abuse@ address I see at the bottom of whois report.
    > This morning I found a third attempt to send email through my smtp
    > server from kornet.net. Is there anyone I can report them to if it
    > happens again? I've sent them email all three times that they've
    > attempted to use my server...
    >
    > -Michael Sullivan-

    Well, I wish you the best of luck because you're going to need it. kornet
    is a Korea operation that sends tons of spam. I actually got a reply back
    from them one time that told me in very definite terms to stop bothering
    them.

    kornet.com owns a series of ip's. Just put the following line in
    /etc/mail/access (assuming you're using sendmail)...

    204.228.229 DISCARD

    and then do a

    makemap hash access < access

    There is no need to restart sendmail. This will result in sendmail
    discarding all further email from any of their ip's.

    -- 
    Gerry
    "The lyfe so short, the craft so long to learne"  Chaucer
    -- 
    redhat-list mailing list
    unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    https://www.redhat.com/mailman/listinfo/redhat-list
    

  • Next message: Marķa Viola Deambrosis: "Professional RedHat 7.3 DBase Server randomly gets blocked"

    Relevant Pages

    • Re: SMTP access
      ... >>attempted unauthorized access I run the IP through whois and then I send ... >>an email to the abuse@ address I see at the bottom of whois report. ... >>server from kornet.net. ... > There is no need to restart sendmail. ...
      (RedHat)
    • SMTP access
      ... attempted unauthorized access I run the IP through whois and then I send ... an email to the abuse@ address I see at the bottom of whois report. ... server from kornet.net. ...
      (RedHat)
    • Re: What is multikabel.net?
      ... post this one through their US server and see if it's any different... ... Whois Server Version 2.0 ... Users may consult the sponsoring registrar's Whois database to ... the Data in VeriSign Global Registry ...
      (news.software.readers)
    • Verisign allows SecurityWarnings.NET to be a Russian Mafia Blackmail Site
      ... Complaining to Verisign directly is likely to have more effect since ... Whois Server Version 1.3 ... Whois Server: whois.criticalinternet.com ... Users may consult the sponsoring registrar's Whois database ...
      (alt.comp.anti-virus)
    • Re: Installation des Servicepacks 1 f?r Vista kein Zugriff auf Freigaben
      ... thorsten@war% whois 168.87.54.38 ... der Schaden (und die Schadenersatzansprüche an Microsoft) in die ... unless that client agrees to perform SMB packet signing". ... Jetzt kannst du dir ausmalen, was herauskommt, wenn der Server ...
      (microsoft.public.de.german.windows.server.general)