[Linux-Anyway] Re: Damn it! Open relay -- again

  • From: horrorvacui@xxxxxxx
  • To: Linux-Anyway@xxxxxxxxxxxxx
  • Date: Sun, 23 Mar 2003 21:40:50 +0100

On Sun, 23 Mar 2003 10:31:50 -0800 (PST)
Meph Istopheles <Meph@xxxxxxxxxxx> wrote:

> 
>   Hey,
> 
>   Don't know how it happened, but either sendmail (from RH) 
> hasn't been secure from my last install, or in dealing with all 
> my hassles getting my private network working opened sendmail up 
> to others.  For some days spammers were relaying through my 
> server.

I wonder how long it will take before people start finding them out and
beating the crap out of them. God rot their bones.

> 
>   In the end, I had to completely shut sendmail down & am using 
> my isp's smtp server.

Friday, as I was (unsuccessfully) trying to scan my public IP for open
ports, I scanned yours as well:

Port       State       Service
21/tcp     open        ftp                     
22/tcp     open        ssh                     
80/tcp     open        http                    
111/tcp    open        sunrpc                  
179/tcp    filtered    bgp                     
443/tcp    open        https                   
512/tcp    open        exec                    
515/tcp    open        printer                 
648/tcp    open        unknown                 
3306/tcp   open        mysql                   
6000/tcp   open        X11

Here at least there was no SMTP port open, but the only IP I scanned was
the one bound to your domain. Could some other machines be running
sendmail as well? The firewall seems not to have been running at the time.
I just scanned you again and got the same result.

Sorry I can't help on sendmail - this is a complete mystery to me. Had a
look at sendmail.cf the other day and suffered a heavy headache right
away. Reminds of the old newbie days as configuration files made no sense
except perhaps somebody pulling my leg.

Cheers

-- 
Horror Vacui

Registered Linux user #257714

Go get yourself... counted: http://counter.li.org/
- and keep following the GNU.
To unsubcribe send e-mail with the word unsubscribe in the body to:   
Linux-Anyway-Request@xxxxxxxxxxxxx?body=unsubscribe

Other related posts: