Hello all,

  I'm getting these reports in the log files daily.  "About to execute
command 'relayok ..." etc.
I'm wondering if anyone else is getting these and what the threat level
is.
---------

Oct 20 04:50:05 ns2 sendmail[26397]: k9K9o3Tj026397:
from=<[EMAIL PROTECTED]>, size=0, class=0, nrcpts=0, proto=SMTP,
daemon=MTA, relay=ask-soft.rmt.ru [81.13.115.234]
Oct 20 04:50:14 ns2 mimedefang-multiplexor[2563]: Starting slave 9 (pid
26411) (3 running): About to execute command 'relayok 212.235.233.116
[212.235.233.116] '
Oct 20 04:50:14 ns2 mimedefang-multiplexor[2563]: Starting slave 4 (pid
26415) (4 running): About to execute command 'relayok 212.235.233.116
[212.235.233.116] '
Oct 20 04:50:14 ns2 mimedefang-multiplexor[2563]: Starting slave 3 (pid
26417) (5 running): About to execute command 'relayok 212.235.233.116
[212.235.233.116] '
Oct 20 04:50:14 ns2 mimedefang.pl[22526]: RELAY: <212.235.233.116>
<[212.235.233.116]>
Oct 20 04:50:14 ns2 mimedefang-multiplexor[2563]: Starting slave 7 (pid
26418) (6 running): About to execute command 'relayok 212.235.233.116
[212.235.233.116] '
Oct 20 04:50:14 ns2 mimedefang.pl[25692]: RELAY: <212.235.233.116>
<[212.235.233.116]>
Oct 20 04:50:14 ns2 mimedefang.pl[25692]: RELAY: <212.235.233.116>
<[212.235.233.116]>
Oct 20 04:50:14 ns2 mimedefang.pl[22526]: RELAY: <212.235.233.116>
<[212.235.233.116]>
Oct 20 04:50:16 ns2 mimedefang.pl[22526]: helo: [212.235.233.116]
(212.235.233.116) said "helo lilijana"
Oct 20 04:50:16 ns2 mimedefang.pl[22526]: filter_helo rejected helo
lilijana

--
Dave Helton, Senior Systems Engineer
Hughes Network Technologies
2407 - 40th Street
Moline, IL  61265
(309) 743-2130 x109   

_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to