Re: [Exim] Attack

Góra strony
Delete this message
Reply to this message
Autor: Exim Users Mailing List
Data:  
Dla: Johnson, Michael
CC: exim-users
Temat: Re: [Exim] Attack
[ On Tuesday, January 28, 2003 at 17:00:41 (-0500), Johnson, Michael wrote: ]
> Subject: [Exim] Attack
>
> What do you guys make of this?
>
> 2003-01-28 15:07:24 rejected EHLO from [210.101.59.78]: syntactically
> invalid argument(s): \300\251\265\265\277\354
> 2003-01-28 15:08:49 rejected HELO from [210.101.59.78]: syntactically
> invalid argument(s): \300\251\265\265\277\354


It's not likely an attack (though it may be a spammer or an open relay).

It's more likely some idiot software that allowed a poor naive system
administrator to set a hostname using non-ASCII characters or maybe some
other idiot software which then proceded to try to use that hostname in
the SMTP transaction.

--
                                Greg A. Woods


+1 416 218-0098;            <g.a.woods@???>;           <woods@???>
Planix, Inc. <woods@???>; VE3TCP; Secrets of the Weird <woods@???>