httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jacob Coby" <jc...@listingbook.com>
Subject Re: [users@httpd] Strange, Disconcerting Access Log Entries
Date Mon, 04 Nov 2002 16:44:44 GMT
> I do appreciate your feedback, but no that's not right.   First,
> the SMTP port is not open.  You must authenticate.  Second,
> anytime you telnet it is logged in the server's messages log.
> Anytime you use the mail command or sendmail, it would be logged
> in the messages log.
>
> There were thousands of entries in the Apache log, meaning
> someone communicated with the server via Apache.  There were no
> entries in the messages log, which indicates that Apache acted
> without the help of sendmail, SMTP, mail, etc...
>
> Further, the IPs that were connected to via port 25, were not on
> the server.

it sounds like they're using your webserver as a relay/tunnel/proxy since
the requests are coming through port 80 to 25.  Check out sendmail -G, and
try to relay email off of your webserver.  Do you have a proxy enabled?  Is
it secured?

-Jacob


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message