Spam relay?

[playa]

anyone here know anything about using your server for spam?

the last few days one of my server jumped from my average of 1meg to 2meg for like 2 hours a day,,this happened like 4 times,,
someone told me that its prolly someone spamming using my server for relay

i found out the ip address
202.241.152.110
it looks like that ip is from japan,,and i know alot of spam comes from there

do anyof ya find the same

this sucks

------------------
------------
Playa
icq#38147712
Got a Black site or category?
Get a Black Dialer!!

www.NoBSdialer.com

[asianguy]

you got fucked. Luckily there's only 1 person used yours, If he invites his friends to do it you will lose at least 1gb per hour.

Good luck,

------------------
www.fuck-american.com

[playa]

damn,,i hate to set a cap on the server,,,

how can i stop this?
i don't think blocking the ip would be good enough

------------------
------------
Playa
icq#38147712
Got a Black site or category?
Get a Black Dialer!!

www.NoBSdialer.com

[asianguy]

Dos attack that IP. if you know his web site url then DOS attack it. In 1 hour will cost him at least 200 Gigs of bandwidth.

------------------
www.fuck-american.com

[playa]

the ip resolves to www.PREF.AICHI.JP

They have an english version but not really sure what type of site its like if its an ISP,,not sure if they give free hosting or the spammers are using them for relay,,,

this sucks,,

[bunky]

heres whatcha do. www.spam-abuse.net send the IP they will trace it and stop his spam by jamming port 29 which is where smtp is sent. or u can winnuke the ip and shut his shit down for good :-)

[bunky]

please correct that http://spam.abuse.net/

[mr. mpg]

Playa,
If someone is sending bulk mail from your server you best contact your admin ASAP.
Here is some reading about it........ http://mail-abuse.org/tsi/ar-fix.html

------------------
Webmasters... Need free gallery content?
Tons of quality pics! Now with full FTP!
XXXFreeHosting

[playa]

thanks everyone,,i got my host looking into it,,

[ztik]

do you use a formmail script? possibly the one by matt right? If you do you need to upgrade to the new version. on the old one even with reffers set its still easy to bypass and spam with it just by typing a url in your browser. also if you have anon ftp setup be sure noone has tagged your pub.

[This message has been edited by ztik (edited 08-31-2001).]

[This message has been edited by ztik (edited 08-31-2001).]

[RK]

Originally posted by bunky:
jamming port 29 which is where smtp is sent. or u can winnuke the ip and shut his shit down for good :-)

1) This is illegal
2) SMTP runs on port 25.
3) winnuke does not work for many years now.
4) There is a very simple solution, block relaying in sendmail for all IPs besides yours.



------------------
Pay-As-You-Go Hosting FREE Trial!
Below $.90/GB Dedicated Hosting
EnergyHosting - Energizing your business

[Kimmykim]

Get with your host -- it's fairly simple to stop open relaying, they should have already taken care of this for you on set up I would think --

One of the biggest complaints the old RBL (still around just quiet now I guess) had was that server admins weren't disallowing open relaying -- couple that with some spam complaints and you could get blackholed in no time back then...

[Rocky]

Originally posted by asianguy:
you got fucked. Luckily there's only 1 person used yours, If he invites his friends to do it you will lose at least 1gb per hour.

Good luck,

can't you think of a more intelligent way for spamming that stupid BBS

as AWC said:
"Canada is just the attic for the U.S. a place for us to put all the shit we don't need"

and that's where you should go...back in the attic