Even better would be to block incomming connections to sendmail's port
from anything but your ip (dunno which @home your on)
On Wed, 22 Sep 1999, Eric L. Damron wrote:
> Thank You!!!!
> -----Original Message-----
> From: Axalon Bloodstone <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
> Date: Wednesday, September 22, 1999 1:32 PM
> Subject: Re: [newbie] PLEASE! What do these log entries mean?!?
>
>
> >On Wed, 22 Sep 1999, Eric L. Damron wrote:
> >
> >> I have found that people unknown are attacking my linux box! The
> following
> >> entries were found in maillog:
> >>
> >> Sep 15 07:09:07 C287853-A sendmail[1979]: NOQUEUE: [157.89.64.77]: VRFY
> >> guest
> >> Sep 15 07:09:07 C287853-A sendmail[1980]: NOQUEUE: [157.89.64.77]: VRFY
> >> decode
> >> Sep 15 07:09:07 C287853-A sendmail[1981]: NOQUEUE: [157.89.64.77]: VRFY
> bbs
> >> Sep 15 07:09:07 C287853-A sendmail[1982]: NOQUEUE: [157.89.64.77]: VRFY
> lp
> >> Sep 15 07:09:07 C287853-A sendmail[1983]: NOQUEUE: [157.89.64.77]: VRFY
> >> uudecode
> >> Sep 15 07:09:07 C287853-A sendmail[1977]: NOQUEUE: "wiz" command from
> >> [157.89.64.77] (157.89.64.77)
> >> Sep 15 07:09:07 C287853-A sendmail[1977]: NOQUEUE: "debug" command from
> >> [157.89.64.77] (157.89.64.77)
> >>
> >> (WHAT THE HELL IS THE "WIZ" COMMAND. AND THE "DEBUG" COMMAND!!
> >>
> >> Please! If anyone knows what this jerk is trying to do and How I can
> stop
> >> him PLEASE let me know!
> >>
> >> Thanks.
> >>
> >
> >ipchains -I input -s 157.89.64.77/0 -d 0/0 -j REJECT
> >
> >
> >--
> >MandrakeSoft http://www.mandrakesoft.com/
> > --Axalon
> >
>
>
--
MandrakeSoft http://www.mandrakesoft.com/
--Axalon
