From owner-freebsd-questions  Sat Nov  9 18: 6:27 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7B42437B401
	for <freebsd-questions@FreeBSD.ORG>; Sat,  9 Nov 2002 18:06:26 -0800 (PST)
Received: from lancelot.cosmicfire.net (lancelot.cosmicfire.net [64.32.246.114])
	by mx1.FreeBSD.org (Postfix) with SMTP id 7D81143E3B
	for <freebsd-questions@FreeBSD.ORG>; Sat,  9 Nov 2002 18:06:25 -0800 (PST)
	(envelope-from gs@vacfu.org)
Received: (qmail 29067 invoked from network); 10 Nov 2002 02:05:54 -0000
Received: from dh-fw-1.oru.se (HELO rainbowpeace.DH-FW-1.oru.se) (gs@vacfu.org@130.243.97.72)
  by vacfu.org with SMTP; 10 Nov 2002 02:05:54 -0000
Date: Sun, 10 Nov 2002 03:04:43 +0100
From: Gustaf Sjoberg <gs@vacfu.org>
To: "W. D." <WD@US-Webmasters.com>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: How to stop SPAMMER??!
Message-Id: <20021110030443.1b0577ad.gs@vacfu.org>
In-Reply-To: <5.1.0.14.2.20021109150436.069a4d50@us-webmasters.com>
References: <5.1.0.14.2.20021109150436.069a4d50@us-webmasters.com>
X-Mailer: Sylpheed version 0.8.3 (GTK+ 1.2.10; i386-portbld-freebsd4.7)
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Sat, 09 Nov 2002 15:13:09 -0600
"W. D." <WD@US-Webmasters.com> wrote:

either block incomming port 25 connections or set the smtserver to require authentication.

ipfw entry could look something like:

add <rule#> deny log tcp from any to <yourip> 25 in recv <interface>

>Hi folks,
>
>I've got some bozo from:
>
>    SpaWeb1.spaelegance.com..auth
>
>doing all kinds of SMTP activity on my FreeBSD server.  Does anyone
>know how to stop this?  What kind of entry would I add to ipfw?
>
>Does anyone know what vulnerability this might be?  How to stop
>permanently?
>
>Here's what I am running:
>FreeBSD 4.4-RELEASE
>Apache/1.3.27 (Unix)
>mod_perl/1.26
>mod_throttle/3.1.2
>PHP/4.2.2
>FrontPage/4.0.4.3
>mod_ssl/2.8.11
>OpenSSL/0.9.6f 
>
>
>Start Here to Find It Fast!© -> http://www.US-Webmasters.com/best-start-page/
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-questions" in the body of the message
>

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message