[Postfixbuch-users] Spam per HTTP (?) - wie Server absichern

phileon jg at phileon.de
Fr Sep 3 02:46:19 CEST 2004


Hallo,

da ist man seit Monaten glücklich, dass sein Postfix mit smtp-auth 
läuft und läuft - bis man plötzlich feststellt, dass man plötzlich 
recht viele Logfile-Einträge der Art (siehe unten) in einem http access 
Logfile findet.
Erster Gedanke - Spam - die Frage ist nun, wie absichern bzw. senden 
die wirklich? Denn das access_log füllt sich sekündlich, aber im 
maillog ist davon nichts zu merken.

Es läuft z.Z. Apache/1.3.31 und Postfix 2.0.20

Dankbar für jede Hilfe!

Gruß,
  Jan


7 Sekunden sollten reichen :-(
211.100.24.179 - - [03/Sep/2004:02:36:40 +0200] "CONNECT 
209.225.8.224:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.168 - - [03/Sep/2004:02:36:40 +0200] "CONNECT 
218.246.32.243:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.168 - - [03/Sep/2004:02:36:40 +0200] "CONNECT 
202.81.252.26:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.151 - - [03/Sep/2004:02:36:40 +0200] "CONNECT 
165.21.73.176:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.147 - - [03/Sep/2004:02:36:41 +0200] "CONNECT 
64.156.215.18:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.162 - - [03/Sep/2004:02:36:41 +0200] "CONNECT 
211.125.95.147:25 HTTP/1.0" 200 8511 "-" "-"
211.100.24.179 - - [03/Sep/2004:02:36:41 +0200] "CONNECT 
24.93.41.201:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.151 - - [03/Sep/2004:02:36:41 +0200] "CONNECT 
130.113.128.17:25 HTTP/1.0" 200 8511 "-" "-"
211.100.24.179 - - [03/Sep/2004:02:36:41 +0200] "CONNECT 64.157.4.78:25 
HTTP/1.0" 200 8511 "-" "-"
82.80.252.168 - - [03/Sep/2004:02:36:42 +0200] "CONNECT 64.156.215.8:25 
HTTP/1.0" 200 8511 "-" "-"
82.80.252.151 - - [03/Sep/2004:02:36:42 +0200] "CONNECT 
212.125.75.12:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.151 - - [03/Sep/2004:02:36:42 +0200] "CONNECT 
130.113.128.17:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.162 - - [03/Sep/2004:02:36:42 +0200] "CONNECT 
213.218.65.27:25 HTTP/1.0" 200 8511 "-" "-"
211.100.24.177 - - [03/Sep/2004:02:36:43 +0200] "CONNECT 
202.67.240.41:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.180 - - [03/Sep/2004:02:36:43 +0200] "CONNECT 
65.71.146.177:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.171 - - [03/Sep/2004:02:36:44 +0200] "CONNECT 
192.67.198.37:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.171 - - [03/Sep/2004:02:36:44 +0200] "CONNECT 
217.21.93.103:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.162 - - [03/Sep/2004:02:36:45 +0200] "CONNECT 209.92.50.63:25 
HTTP/1.0" 200 8511 "-" "-"
211.100.24.179 - - [03/Sep/2004:02:36:45 +0200] "CONNECT 
64.12.137.152:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.151 - - [03/Sep/2004:02:36:45 +0200] "CONNECT 
130.113.64.83:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.168 - - [03/Sep/2004:02:36:45 +0200] "CONNECT 
200.14.114.102:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.168 - - [03/Sep/2004:02:36:46 +0200] "CONNECT 
66.218.86.197:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.162 - - [03/Sep/2004:02:36:46 +0200] "CONNECT 
213.152.250.14:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.147 - - [03/Sep/2004:02:36:47 +0200] "CONNECT 
69.20.119.201:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.151 - - [03/Sep/2004:02:36:47 +0200] "CONNECT 
165.21.73.176:25 HTTP/1.0" 200 8511 "-" "-"
82.80.252.170 - - [03/Sep/2004:02:36:47 +0200] "CONNECT 65.17.128.71:25 
HTTP/1.0" 200 8511 "-" "-"




Mehr Informationen über die Mailingliste Postfixbuch-users