[Postfixbuch-users] Spam per HTTP (?) - wie Server absichern
phileon
jg at phileon.de
Fr Sep 3 02:46:19 CEST 2004
Hallo,
da ist man seit Monaten glücklich, dass sein Postfix mit smtp-auth
läuft und läuft - bis man plötzlich feststellt, dass man plötzlich
recht viele Logfile-Einträge der Art (siehe unten) in einem http access
Logfile findet.
Erster Gedanke - Spam - die Frage ist nun, wie absichern bzw. senden
die wirklich? Denn das access_log füllt sich sekündlich, aber im
maillog ist davon nichts zu merken.
Es läuft z.Z. Apache/1.3.31 und Postfix 2.0.20
Dankbar für jede Hilfe!
Gruß,
Jan
7 Sekunden sollten reichen :-(
211.100.24.179 - - [03/Sep/2004:02:36:40 +0200] "CONNECT
209.225.8.224:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.168 - - [03/Sep/2004:02:36:40 +0200] "CONNECT
218.246.32.243:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.168 - - [03/Sep/2004:02:36:40 +0200] "CONNECT
202.81.252.26:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.151 - - [03/Sep/2004:02:36:40 +0200] "CONNECT
165.21.73.176:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.147 - - [03/Sep/2004:02:36:41 +0200] "CONNECT
64.156.215.18:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.162 - - [03/Sep/2004:02:36:41 +0200] "CONNECT
211.125.95.147:25 HTTP/1.0" 200 8511 "-" "-"
211.100.24.179 - - [03/Sep/2004:02:36:41 +0200] "CONNECT
24.93.41.201:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.151 - - [03/Sep/2004:02:36:41 +0200] "CONNECT
130.113.128.17:25 HTTP/1.0" 200 8511 "-" "-"
211.100.24.179 - - [03/Sep/2004:02:36:41 +0200] "CONNECT 64.157.4.78:25
HTTP/1.0" 200 8511 "-" "-"
82.80.252.168 - - [03/Sep/2004:02:36:42 +0200] "CONNECT 64.156.215.8:25
HTTP/1.0" 200 8511 "-" "-"
82.80.252.151 - - [03/Sep/2004:02:36:42 +0200] "CONNECT
212.125.75.12:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.151 - - [03/Sep/2004:02:36:42 +0200] "CONNECT
130.113.128.17:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.162 - - [03/Sep/2004:02:36:42 +0200] "CONNECT
213.218.65.27:25 HTTP/1.0" 200 8511 "-" "-"
211.100.24.177 - - [03/Sep/2004:02:36:43 +0200] "CONNECT
202.67.240.41:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.180 - - [03/Sep/2004:02:36:43 +0200] "CONNECT
65.71.146.177:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.171 - - [03/Sep/2004:02:36:44 +0200] "CONNECT
192.67.198.37:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.171 - - [03/Sep/2004:02:36:44 +0200] "CONNECT
217.21.93.103:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.162 - - [03/Sep/2004:02:36:45 +0200] "CONNECT 209.92.50.63:25
HTTP/1.0" 200 8511 "-" "-"
211.100.24.179 - - [03/Sep/2004:02:36:45 +0200] "CONNECT
64.12.137.152:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.151 - - [03/Sep/2004:02:36:45 +0200] "CONNECT
130.113.64.83:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.168 - - [03/Sep/2004:02:36:45 +0200] "CONNECT
200.14.114.102:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.168 - - [03/Sep/2004:02:36:46 +0200] "CONNECT
66.218.86.197:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.162 - - [03/Sep/2004:02:36:46 +0200] "CONNECT
213.152.250.14:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.147 - - [03/Sep/2004:02:36:47 +0200] "CONNECT
69.20.119.201:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.151 - - [03/Sep/2004:02:36:47 +0200] "CONNECT
165.21.73.176:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.170 - - [03/Sep/2004:02:36:47 +0200] "CONNECT 65.17.128.71:25
HTTP/1.0" 200 8511 "-" "-"
Mehr Informationen über die Mailingliste Postfixbuch-users