[KLUG Members] Question about oddball logwatch entries.

[Peter Buxton]

On Mon, Nov 25, 2002 at 11:15:08AM -0500, Adam Bultman wrote:

> Anyone seen this before?  I assume it's a SPAMmer looking for another
> unsuspecting host.  But at the very least, he's not an open relay, and
> he's been denying such people of service.

Heck, yes. One client of mine was thoroughly 'scanned' by AOL doing
relay testing.  They tried seven different things (and I really wished
I'd kept that log file) including the '%' hack. (We passed.) And that
was the non-spammer. I get lots of relay attempts from other places. I'm
not sure how Sendmail writes its log files, but under Exim, grep for
'refused relay'. I just found 18 different rejections based on about 10
days of logs.

-- 
for gpg key: http://killdevil.org/~peter
but to live outside the law you
must be honest.... -- bob dylan