On Thursday 01 April 2004 15:18, Chuck Lewis wrote: > Hi Folks, > > We had a user get a warning and be directed to the following URL: > > http://opm.blitzed.org/216.37.48.203 > > This is the address of our email server and I have no idea what all this > means. Is this really pointing to the email server or the PC that got it ? > > Thanks ! > > Chuck
Chuck, This entry means that at some point, the machine with IP address 216.37.48.203 was connected to on a "proxy" port, it accepted the connection and "relayed" mail back to the Blitzed site - at which time it was listed in the RBL as an "open" proxy. Looks like the entry has been "pulled" (made inactive) but you might want to check it out further... -- Larry Smith SysAd ECSIS.NET [EMAIL PROTECTED] _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
