At 10:05 PM 2/18/2003 -0500, Jeff Bonner wrote:
> 2003-02-17 03:08:34 verify failed for SMTP recipient 20021022122914.
> ga32459@??? from <checker@???> H=(cyberproxy.
> com) [202.88.132.23]
HELO and MAIL FROM: are both cyberproxy.com - you can reject on one or the
other.
Then parse your logs and block whatever IP delivers that mail to you - they
are all open proxies.
The real cyberproxy.com is a site handling corporate / board meeting
proxies (the paper kind, not the winproxy / squid kind). Their domain is
being forged into this afaict.
srs
