On Thu, 2003-01-23 at 12:38, Peter Kiem wrote: > > 24.30.199.228 - - [22/Jan/2003:18:55:49 +1000] "CONNECT > security.rr.com:25 HTTP/1.0" 200 14244 "-" "-" > > Since 24.30.199.228 is not my IP address does that mean they are > relaying mail through my Apache or is it my Apache sending mail to them?
It means that 24.30.199.228 is trying to use your apache server as a proxy to reach the mail server at security.rr.com. That ip is known as securityscan.sec.rr.com, so you're probably a customer of theirs that they're checking for security problems. The status 200 may indicate that you're vulnerable to the problem they're testing for. What version of apache are you running? On what platform? Have you enabled proxying? -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
