[plug] nasty spammer

Mark Nold markn at enspace.com
Wed Mar 27 16:02:33 WST 2002


try "named" instead of Bind

service named status
chkconfig --list | grep named

-----Original Message-----
From: Bret Busby [mailto:bret at busby.net]
Sent: Wednesday, March 27, 2002 3:58 PM
To: plug at plug.linux.org.au
Subject: Re: [plug] nasty spammer


On 27 Mar 2002, Jeff wrote:

> 
> Your not running Redhat 6.2 with the original bind I hope.
> 

We are running RH 6.2, on our mail server. 

ps -ax | grep 'bind' does not show that we have bind running. I assume
that is the correct synatx, to determine whether bind is running.

Postfix sends messages, from time to time, indicating that someone is
trying to use us for relaying.

Email addresses involved, in persistent attempts, include .sg and
sg.co.nz.

Information from the Singapore police, indicates that the spoofing has
originated from the USA or Canada.

The FBI seem to think that security breach attempts (no, I do not
use the word "hacking", for this, Christian) in order to implement 
unauthorised relaying, is acceptable practice, as the FBI does not regard
the possible DoS attacks, and, possible viral email relaying, etc, as
threats to the USA infrastucture. But then, the FBI probably uses Win 3x,
for security...

-- 
Bret Busby
..............

"So once you do know what the question actually is, 
 you'll know what the answer means."
 - Deep Thought, 
   Chapter 28 of The Hitchhiker's Guide to the Galaxy
 - Douglas Adams, 1988
.......................................







More information about the plug mailing list