On Mon, Mar 06, 2000 at 06:53:55AM -0500, Scott Kindley wrote:
| -----BEGIN PGP SIGNED MESSAGE-----
| Hash: SHA1
|
| I run logcheck and have noticed what appeared to be mail neing relayed
| by my machine. So I blocked the offender via /etc/hosts.deny and listed
| the IP and domain in linuxconf to disallow relaying from them also.
|
| So...logcheck reports this:
|
| Security Violations
| =-=-=-=-=-=-=-=-=-=
| Mar 5 19:16:02 www sendmail[24770]: NOQUEUE: ruleset=check_relay,
| arg1=planw-24-126.pompano.net, arg2=24.26.24.126,
| relay=planw-24-126.pompano.net [24.26.24.126], reject=553 Your kidding
| right? No Spammers allowed!
[...]
| So my question is this. What does "NOQUEUE: Null connection from
| acacia.mediahub.com.sg [203.126.200.20]" actually mean?
Can't help with that, but...
| I am assuming he didn't get thru, but yet I read it that he connected??
It is necessary for the connection to occur for the rule to fire up.
The check happens after the connection (since only then can it ask the
socket where it comes from - pre-emptive blocking needs ipchains),
but before any mail transfer happens.
--
Cameron Simpson, DoD#743 [EMAIL PROTECTED] http://www.zip.com.au/~cs/
Usenet is not a right. - Gene Spafford
Usenet is a right, a left, a jab, and a sharp uppercut to the jaw.
The postman hits! You have new mail. - Ed Vielmetti
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
