[Raw Msg Headers][Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SLmail systems sending illegal stuff on SMTP session



  [ Below "VGER" refers to  vger.rutgers.edu  system. ]

On Wed, Jan 12, 2000 at 03:50:56PM -0800, David S. Miller wrote:
> It's been filling up the logs enough, leading to often
> out of space condition at the vger.  Here is excerpt, they
> look all the same:

  Put those IP addresses to  smtp-policy.spam.manual as:
	[208.139.139.4]/32
  and regenerate the policy set.  Then VGER will refuse to
  talk with those spewers..

> Jan 12 02:37:32 vger smtpserver[18821]: unknown SMTP command '550
> Syntax error' from ns2.wk.net/4460

  Looking at currently running processes at VGER, I see:

10023  ?  S    6:20  \_ <ns2.wk.net 550 Syntax error                  
10026  ?  S    6:18  \_ <ns2.wk.net 550 Syntax error                  
30150  ?  S    0:00  \_ <[159.226.43.51] 550 Syntax error             

  [ I contacted those systems who contacted VGER, and sure enough
    something replies to SMTP.  Short session captures below. ]


  I don't know what the hell is SLmail, and who has made it.
  ... Google yields:

SLmail is an NT mail server that turns any Windows system into an Internet..
...Users Click Here! Overview Seattle Lab SLmail is the solution for...
...commercial Windows NT mail server, SLmail is a flexible messaging... 
   www.seattlelab.com/slmail/ - Cached: 9k - GoogleScout

  Right, so it is a thread/socket screwup in it.
  --> Ball to Seattle Labs ...

Connected to ns2.wk.net.
220 mail.wk.net SMTP Server SLmail 3.2.3113 Ready ESMTP spoken here
ehlo foo
250-mail.wk.net
250-SIZE 100000000
250-SEND
250-SOML
250-SAML
250-HELP
250-VRFY
250-EXPN
250-ETRN
250 XTRN


Connected to 159.226.43.51.
220 avt.ict.ac.cn Smtp Server SLMail v2.5 Ready ESMTP spoken here
ehlo foo
250-avt.ict.ac.cn says hello 
250-SEND
250-SOML
250-SAML
250-HELP
250-EXPN
250-SIZE 100000000
250-ETRN
250 XTRN

> Hmmm...
> 
> Later,
> David S. Miller
> davem@redhat.com

/Matti Aarnio <mea@vger.rutgers.edu> <matti.aarnio@sonera.fi>