httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Boyle Owen" <Owen.Bo...@swx.com>
Subject RE: [users@httpd] Server-status-- Strange Lines
Date Wed, 02 Apr 2003 07:13:41 GMT
Hmmm... Port 25 is, of course, reserved for SMTP (email). It looks like
a mail spammer is trying to relay his spam through your server so that
it looks like you sent the spam!

Check to see if you have an AllowCONNECT directive. If you have, make
sure it doesn't contain "25" (or if it does, understand why you need
this). If you don't have the directive, the default is 443 (HTTPS) and
563 (news) so port 25 is blocked by default.

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored. 

>-----Original Message-----
>From: Lewis Watson [mailto:lists@visionsix.com]
>Sent: Dienstag, 1. April 2003 22:08
>To: users@httpd.apache.org
>Subject: [users@httpd] Server-status-- Strange Lines
>
>
>I just looked at server-status on my www server and I saw this.
>
>      23-0  -  0/0/10  .  0.00  1700  1  0.0  0.00  0.03  
>217.21.114.143
>(unavailable)  CONNECT 207.46.181.13:25 HTTP/1.1
>      24-0  -  0/0/45  .  0.01  1700  5  0.0  0.00  0.14  
>217.21.114.143
>(unavailable)  CONNECT 207.46.181.13:25 HTTP/1.1
>      25-0  -  0/0/13  .  0.01  1700  0  0.0  0.00  0.02  
>217.21.114.143
>(unavailable)  CONNECT 207.46.181.13:25 HTTP/1.1
>      26-0  -  0/0/7  .  0.00  1700  0  0.0  0.00  0.03  217.21.114.143
>(unavailable)  CONNECT 207.46.181.13:25 HTTP/1.1
>      27-0  -  0/0/25  .  0.00  1700  0  0.0  0.00  0.10  
>217.21.114.143
>(unavailable)  CONNECT 207.46.181.13:25 HTTP/1.1
>      28-0  -  0/0/11  .  0.00  1700  0  0.0  0.00  0.04  
>217.21.114.143
>(unavailable)  CONNECT 64.156.215.5:25 HTTP/1.1
>
>
>It appears that 217.21.114.143 is trying to use my machine to 
>connect to
>port 25 of 64.156.215.5. Is that what this is showing?
>Thanks!
>Lewis
>
>
>---------------------------------------------------------------------
>The official User-To-User support forum of the Apache HTTP 
>Server Project.
>See <URL:http://httpd.apache.org/userslist.html> for more info.
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>
>

This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please notify the sender urgently
and then immediately delete the message and any copies of it from your
system. Please also immediately destroy any hardcopies of the message.
You must not, directly or indirectly, use, disclose, distribute, print,
or copy any part of this message if you are not the intended recipient.
The sender's company reserves the right to monitor all e-mail
communications through their networks. Any views expressed in this
message are those of the individual sender, except where the message
states otherwise and the sender is authorised to state them to be the
views of the sender's company. 



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message