From: Serdar KOYLU (skoylu@gizemcafe.net)
Date: Fri 11 Jul 2003 - 19:52:14 EEST
Selamlar..
Alttaki log ciktisina bir bakmak yeterli olabilir. Buradaki aslolan husus, 3-5
sn'de bir boyle bir istegin gelmis olmasi. Bunun yaratacagi gereksiz
downstream, cpu vs yukunu filan dusununce dehsette kaliyor insan. Allahtan
firewall makine ayni zamanda, dah SYN-SEND iken bloke ettikte biraz rahatladi
alet..
Onemli olan bizim bunlardan nasil kurtulabilecegimizden ziyade, mail server
tarafinda bu tur yerlerden gelen SPAM'lara karsi neler yapabilecegimiz.
Yani, mail serverde bu tur gelen mailleri ayirt etmek icin bir formul
bulunabilir mi ?
Saygi ve sevgiler..
1057926385.310 5 64.201.105.226 TCP_DENIED/403 1356 CONNECT
65.54.253.230:25 - NONE/- text/html
1057926385.872 5 69.51.15.8 TCP_DENIED/403 1358 CONNECT 207.217.120.29:25
- NONE/- text/html
1057926401.154 0 64.201.101.70 TCP_DENIED/403 1356 CONNECT
195.82.84.178:25 - NONE/- text/html
1057926407.632 8 64.70.45.169 TCP_DENIED/403 1358 CONNECT
207.217.120.79:25 - NONE/- text/html
1057926409.127 5 216.240.147.135 TCP_DENIED/403 1358 CONNECT
205.158.62.134:25 - NONE/- text/html
1057926412.195 6 64.201.101.70 TCP_DENIED/403 1358 CONNECT
66.178.131.130:25 - NONE/- text/html
1057926415.848 350 64.70.45.169 TCP_DENIED/403 1352 CONNECT 164.77.62.8:25
- NONE/- text/html
1057926416.625 4 64.70.45.169 TCP_DENIED/403 1352 CONNECT 208.30.77.3:25
- NONE/- text/html
1057926418.170 0 64.201.105.226 TCP_DENIED/403 1356 CONNECT
65.54.254.151:25 - NONE/- text/html
1057926418.414 25 64.70.45.169 TCP_DENIED/403 1358 CONNECT
203.231.231.41:25 - NONE/- text/html