Re: what's wrong with my sendmail?

Subject: Re: what's wrong with my sendmail?
From: Justin Dieters (enderak@gci.net)
Date: Thu Nov 13 2003 - 10:41:47 AKST

Okay, I talked to GCI, and they are saying it's not an open relay, but the messages were coming directly from my network. I don't have any Windows machines, just an iMac and a couple Linux boxes. Do you think it might be a compromised box? Here's what GCI sent me:

Received: from mail2.bigfoot.com (79-2-237-24.gci.net [24.237.2.79])
 by mmp-2.gci.net
 (iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 18 2003)) with SMTP id
 <0HO900B5ZC768J@mmp-2.gci.net>; Wed, 12 Nov 2003 12:12:01 -0900 (AKST)
Date: Wed, 12 Nov 2003 12:11:58 -0900 (AKST)
Date-warning: Date header was inserted by mmp-2.gci.net
From: Angella <kksrf@bigfoot.de>
Subject: it will help
To: "lmwopcm@yahoo.com" <lmwopcm@yahoo.com>
Message-id: <0HO900B61C768J@mmp-2.gci.net>
MIME-version: 1.0
Content-type: text/html
Content-transfer-encoding: 7BIT


Cyalus is now available to consumers.
Cyalus is superior to Viagra.
Cyalus is superior because:
It acts faster (within 30 minutes).
It lasts much longer (up to 36 hours).
It has far fewer Side effects.
We offer:
Low manufacturer direct pricing.
Private delivery to your home.
No Doctor's Consutation required.
100% Money Back Guarantee.
Why pay twice as much when
Cyalus is a far superior product
and is only a click away?


B

> Post the headers that GCI says is evidence that your server was an
> openrelay so we can check it out. It may be that a junior admin
> at GCI was a
> little hasty in jumping to the conclusion that you were open, or
> it may be
> that you were actually open.
>
> Mike
>
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>
>

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.

This archive was generated by hypermail 2a23 : Thu Nov 13 2003 - 10:41:43 AKST