httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jacob Coby" <>
Subject Re: [users@httpd] Strange, Disconcerting Access Log Entries
Date Mon, 04 Nov 2002 16:44:44 GMT
> I do appreciate your feedback, but no that's not right.   First,
> the SMTP port is not open.  You must authenticate.  Second,
> anytime you telnet it is logged in the server's messages log.
> Anytime you use the mail command or sendmail, it would be logged
> in the messages log.
> There were thousands of entries in the Apache log, meaning
> someone communicated with the server via Apache.  There were no
> entries in the messages log, which indicates that Apache acted
> without the help of sendmail, SMTP, mail, etc...
> Further, the IPs that were connected to via port 25, were not on
> the server.

it sounds like they're using your webserver as a relay/tunnel/proxy since
the requests are coming through port 80 to 25.  Check out sendmail -G, and
try to relay email off of your webserver.  Do you have a proxy enabled?  Is
it secured?


The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:> for more info.
To unsubscribe, e-mail:
   "   from the digest:
For additional commands, e-mail:

View raw message