Not showing that in any conf files..Hmmm
----- Original Message ----- From: "Jelmer Jellema" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 24, 2004 3:56 AM Subject: RE: [cobalt-security] Spaming through Apache? > Dear Dave, > > It looks like you are running a proxy. I don't know if this is intentional. > Through a proxy, a lot of people can do mean things. > > Check out http://httpd.apache.org/docs/mod/mod_proxy.html#allowconnect > > Do you have a AllowConnect 25 somewhere? Remove it, you should not use it. > > If you do not need the proxy, remove it. > > I've never used it, so this is a bit of a guess. Thought you could do with > some random thoughts though, > > Good luck, > Jelmer > > ----------------------------------------------------------------- > Jelmer Jellema - Spin in het Web > http://www.spininhetweb.nl > Spin in het Web: Alle Touwtjes In Handen > ----------------------------------------------------------------- > > > > -----Oorspronkelijk bericht----- > > Van: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Namens lists > > Verzonden: maandag 23 februari 2004 14:04 > > Aan: [EMAIL PROTECTED] > > Onderwerp: [cobalt-security] Spaming through Apache? > > > > > > Over the past month or so Ive seen many logs like this in my > > access logs: > > > > removed.hostname proxyscan2.isomedia.com - - > > [23/Feb/2004:07:23:05 -0500] > > "CONNECT 66.114.137.17:25 HTTP/1.0" 302 217 "-" "-" > > removed.hostname proxyscan2.isomedia.com - - > > [23/Feb/2004:07:23:06 -0500] > > "POST http://66.114.137.17:25/ HTTP/1.0" 302 217 "-" "$ > > > > Now I just checked my servers ip, and its has been > > blacklisted because of > > spammers using it.. Now I know every customer of mine, and I > > checked them > > out and no one has any mails scripts like that installed so.. > > This only > > happens when I see those logs in my apache logs.. > > > > Any ideas where to go to look for a fix for this problem?? At first I > > thought nothing of it because it looks like many of the > > emails end back up > > bounced in my admin mbox, but I guess a shitload gets through.. > > > > Any ideas would help!! > > > > Thanks > > Dave > > > > _______________________________________________ > > cobalt-security mailing list > > [EMAIL PROTECTED] > > http://list.cobalt.com/mailman/listinfo/cobalt-security > > > > _______________________________________________ > cobalt-security mailing list > [EMAIL PROTECTED] > http://list.cobalt.com/mailman/listinfo/cobalt-security > _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
