Re: possible SMTP attack: command=HELO/EHLO, count=3 (fwd)
"Adrian C." <[email protected]>
| Newsgroups | gmane.linux.admin |
|---|---|
| Message-ID | <[email protected]> |
Welcome to the real world :) No really, have RBL checking w/ or w/o spamassassin and you're ok. If you don't use SMTP AUTH disable that too. --Adrian C. terry white wrote: > ... ciao: > > i'm starting to see a lot of the following. > > and i'm not thinking it a good thing ... > > > muedsl-82-207-247-115.citykom.de [82.207.247.115]: possible SMTP attack: > command=HELO/EHLO, count=3 > IGLD-83-130-135-36.inter.net.il [83.130.135.36]: possible SMTP attack: > command=HELO/EHLO, count=3 > bzq-88-153-185-136.red.bezeqint.net [88.153.185.136]: possible SMTP attack: > command=HELO/EHLO, count=3 > bzq-88-152-204-198.red.bezeqint.net [88.152.204.198]: possible SMTP attack: > command=HELO/EHLO, count=3 > 89.1.170.41.dynamic.barak-online.net [89.1.170.41]: possible SMTP attack: > command=HELO/EHLO, count=3 > > - To unsubscribe from this list: send the line "unsubscribe linux-admin" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html