Re: Website link for 194.143.132.10

Dear Alexey,

We upgraded our system ( Merak 8.3.8 )
As I can see I think everithing is now secure ...

Please, can you confirm me and remove our IP ?

Thanks a lot


Hello.

On 17/02/06 12:42, Philippe JEAN - Prosygma Hébergement wrote:

> Dear Alexey Lobanov,
>
> Thanks a lot for your help
> I performed tests on
>
http://www.antispam-ufrj.pads.ufrj.br/cgi-bin/test-relay.cgi?host_to_test=19
> 4.143.132.10
> and it said :
>
> Relay test result
> All tests performed, no relays accepted by remote host.
>
> Can you simply say me on wich test dslbl failed ?

All the necessary information is available in links from "Messages from
this host" section at http://dsbl.org/listing?194.143.132.10

An example:

IP: 194.143.132.10
Input IP: 194.143.132.10
Transport: smtp
Message Received: 2006/02/16 13:39:14 UTC
Message Sent By: anonymous
Extended Information for Transport:
AUTH LOGIN, user=test
MAIL FROM:<[email protected]>
RCPT TO:<[email protected]>

We see that your system has easily guessable password for user "test".
And, possibly, for many other accounts, because you obviously do not run
any password strength auditing tool in your system.

Professional spammers intensively use this class of vulnerabilities
since mid-2002, they just check about 200 combinations of typical
accounts and simple passwords. Same DSBL test does.

Alexey


>
>
>
> Cordialement,
>
> ********************************************************
> Prosygma se developpe en dehors des frontieres :
> consultez : http://www.sygmahosting.ma
> ********************************************************
>
> -----------------------------------------
> Philippe JEAN
> Société Akilao Prosygma Hébergement
> Batiment PROLOGUE I
> La Pyrénéenne
> 31312 LABEGE Cedex
> http://www.prosygma.com
> Service technique : 08 92 23 01 15
> Service commercial : 05 61 75 96 30
> Fax : 05 61 75 96 30
> -----------------------------------------
>
> De : Alexey Lobanov (dsbl) <[email protected]>
> À : Philippe JEAN - Prosygma Hébergement <[email protected]>
> CC : [email protected]
> Répondre à : [email protected]
> Date : 16 févr. 2006 - 14:46
>
>
>
> Hello again.
>
> On 16/02/06 16:06, Alexey Lobanov (dsbl) wrote:
>
>> May we hope that you have performed a full internal security audit and
>> your system has no more weak passwords?
>
> No, we may not :-( Your system is still vulnerable and is still abused.
>
> http://dsbl.org/message?32240035
>
>