Hi, On Thu, Apr 18, 2002 at 09:57:45PM -0500, will trillich wrote: > debian-users: i've got what may be a nasty situation about to > happen. any pointers welcome... > > just got a 'heads up' from an ally at my isp that someone's > reported "dontUthink.com" as a spammer. i'm running debian > potato/exim-- > > Exim version 3.12 #1 built 03-Jan-2002 02:45:13 > Copyright (c) University of Cambridge 1999
First thing is confirm nature of complaint by talking to ISP. I suspect some open relay issue. EXIM or any MTA can be used as open relay if it is not configured right. But configuration can be tricky. One simple thing to do will be deny all SMTP connection from outside by netfilter (using ipmasq package and few example script). I used to do this for my LAN and exim. So I get external mail only by fetch mail from ISP pop server. > how can i be sure that i've not been cracked and am unbeknownst > to me broadcasting/relaying email for others? surely there's > something better than just 'sniffit' and waiting for something > to happen... > the only 'advertising' i've ever done for "dontUthink.com" is > the .sig at the bottom of my emails, as you see below. i do not > spam, never had, never will. > > does 'presumed innocent' operate on the mentality of the average > isp? i'm getting the impression it does NOT... > > ideas? help! > > (hopefully i'll still be able to get email tomorrow...) It is issue with sending mail. Anyway, just close outgoing SMTP port for now and see what happens. -- ~\^o^/~~~ ~\^.^/~~~ ~\^*^/~~~ ~\^_^/~~~ ~\^+^/~~~ ~\^:^/~~~ ~\^v^/~~~ +++++ Osamu Aoki <[EMAIL PROTECTED]>, GnuPG-key: 1024D/D5DE453D . See "User's Guide": http://www.debian.org/doc/manuals/users-guide/ See "Debian reference": http://www.debian.org/doc/manuals/reference/ . "Debian reference" Project at: http://qref.sf.net . I welcome your constructive criticisms and corrections. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
