D&C Lug - Home Page
Devon & Cornwall Linux Users' Group

[ Date Index ][ Thread Index ]
[ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Question for your web servers firewall logs



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Theo Zourzouvillys wrote:
> On Monday 10 February 2003 2:56 pm, Simon Waters wrote:
>
>>Anyone with access to logs on a big web server with lots of
>>zones with A records for the domain, and MX records pointing
>>elsewhere.
>
>
> i've just stuck a rule on for port 25 of one of our domains A
records on all
> of our ingres firewalls, which will count the connection
attempts.  If you
> remind me in 24 hours, i'll give you the results (i'll forget
otherwise, for
> sure) ;)

See your intrigued by that one.

So far I've seen claire.fasthosts.co.uk <eek, this is a busy
mail server>, and an Interscan box misbehaving.

Bruno on the Postfix list found mostly spamware (don't these
guys debug ;-) and SMTPSVC, the IIS mail gateway (aka Microsoft
spam ware ;-). I haven't seen any genuine mail from IIS but then
that would be spam since no IIS forms point back here (well none
I set up) - although I did write a perl replacement for the
Microsoft mail stuff as all the off the shelf form2mail were too
complex or too buggy or both.

> hehe =) next, you'll be drinking green tea...

Only in Chinese restaurants so far.
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+SEFBGFXfHI9FVgYRAiRbAKC6W4yvI5Ksn2dss3EUumQJzQ0sxwCggB3i
H5nLu5oxgEwX7qktwJpEYDQ=
=bokD
-----END PGP SIGNATURE-----

--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.


Lynx friendly