Re: acker attack?

[Randall Gellens]

At 9:15 PM +1000 9/18/01, Wayne Heming wrote:

>I think you will find that the intruder is trying to use popper to 
>relay mail. (Maybe)

They can't relay mail without a valid account, and even then only 
with XTND XMIT.  Perhaps they are just probing for buffer overflows. 
There are none known in Qpopper 4.0.3.  I have a utility that tries 
every parameter of every command for buffer overflows, and it hasn't 
found any.
--