>> Read No. 19289 article  
메일서버가 해킹당한거 같은데 어떻게 해야하나요?

등록 2001-01-31 09:52:00     조회 2
이름 마린    

		아침에 어떤 외국사이트에서 스팸메일을 보내지 말라는 메일을 받았습니다.
 "I LOVE YOU AND I DON'T WANT YOU TO DIE!"
이런 타이틀로 메일이 발송되어 졌더군요.....출처는 저희 서버에서요
 그리고 얼마 않있어 www.orbs.org 라는 사이트에서
메일이 날아 왔습니다. 근데 무슨내용인지 잘 이해가 않갑니다.
원문을 인용합니다.
 Please read this entire message carefully before replying
 If you are not the technical contact for your organisation, please
forward this to the person who is.
 Reference: http://www.orbs.org/messagelookup.php3?address=211.45.55.xx  211.45.55.xx has been detected as an insecure e
mail relay and added to the ORBS database.
 Please check the ORBS website (http://www.orbs.org/) for links
to other sites that may be able to help you close your relay. Most mail
transport agents can be secured quickly by the operator, usually for no
cost other than the time take to read the appropriate instructions for
your software.
 To be removed from the ORBS database, you need to disable the external relay
features of your mail server and then report the IP address 211.45.55.xx
to our web site at  http://www.orbs.org/closed2.php3?address=211.45.55.xx We will immediately remove your site's entry,
 then re-test it for third-party relay capabilities.
 ORBS is an automated testing system, if your mailserver has multiple
IP interfaces, it is likely that you will receive multiple copies of
this message. You should only receive one notice per IP number, however
ORBS notices are sent to both the literal IP address and the resolved DNS
name, so 2 notices may be received in some cases.
 Thank you for your attention to this matter.
 Sincerely,
 listings at orbs.org  The message your system relayed is attached below.
If you believe your server has been secured, please check the
X-Envelope lines to see which vulnerability has been missed
and check them against the list of vulnerabilties at
http://www.orbs.org/envelopes.html  >From sender at orbs.org  Wed Jan 31 12:58:32 2001
Received: from firetool.net (IDENT:root@[211.45.55.xx])
by mail2.manawatu.net.nz (8.9.3/8.9.3) with ESMTP id MAA21597
for <orbs-relaytest at manawatu.co.nz>; Wed, 31 Jan 2001 12:58:24 +1300
X-Remote-IP:211.45.55.xx
Received: from relaytest.orbs.vuurwerk.nl (tester42.orbs.org [62.250.3.55])
by firetool.net (8.10.1/8.10.1) with SMTP id f0UNhRI17648
for <"orbs-relaytest at manawatu.co.nz">; Wed, 31 Jan 2001 08:43:27 +0900
Date: Wed, 31 Jan 2001 08:43:27 +0900
To:"orbs-relaytest at manawatu.co.nz"@firetool.net
From: sender at orbs.org X-Token: wlhlblvkklmynhow
X-Envelope-Sender:<sender at orbs.org>
X-Envelope-Recipient:<"orbs-relaytest at manawatu.co.nz">
Message-Id:<211.45.55.xx at orbs.org>
Subject: ORBS Relay Test - 211.45.55.xx
 This program checks for open relays.
 Open relays are automatically added to the ORBS Open Relay
Database (see http://www.orbs.org/ for details).
 Check http://www.orbs.org/verify.php3?address=211.45.55.xx for this hosts current status.
 Vulnerability checks are detailed at http://www.orbs.org/envelopes.html  Securing help can be found at http://www.orbs.
org/otherresources.html  There are multiple tests applied per IP address. Partially secured hosts may pass some tests, b
ut fail others. Hosts are only classified as secure by ORBS if they pass all tests.
 Hosts which do not deliver messages are not classified as insecure.
 Do not use the above addresses to contact me - use admin at orbs.org.  X-Token: wlhlblvkklmynhow
X-Envelope-Sender: MAIL FROM:<sender at orbs.org>
X-Envelope-Recipient: RCPT TO:<"orbs-relaytest at manawatu.co.nz">
 IP의 마지막숫자는 xx로 표시했습니다.
 누가 제발좀 도와주세요...
지금 서버의 프로세스를 살펴보면 많은 양의 메일이 발송 되어지고 있습니다.
글을 쓰고 있는 지금도 돌고 있습니다.
 물론 SMTP는 막아 놓았습니다.
이름
암호


>> 관련글
19289 메일서버가 해킹당한거 같은데 어떻게 해야하나요?  마린  2001.01.31  ....
  답장 RE: 메일서버가 해킹당한거 같은데 어떻게 해야하나요?  유종철  2001.01.31  ....
Register [ localhost 목록보기 윗글 아랫글
글쓰기
답장쓰기 수정 삭제
정규표현식 [ 상세 검색 ]
페이지로딩: [ 9.65 초 ] 작업시간: [ 9.34 초 ]

Copyleft 1999-2026 by JSBoard Open Project
Theme Designed by IDOO All right reserved
[TOP]

적수네 동네
+
| 적수네 동네
| 공부방
| 리눅스 잡지 서고
| LSN 소스
| 링크 모음
+---+
게시판
+
| 떠들어보세!
| 질문과 답변
| 새소식과 정보
| 1원짜리 팁?
| 대화방
+---+
칼럼?
+
| 세하 훔쳐보기
| Welcome2nite
| 혜진의 염장판
+---+
리눅스 상표권
+
| 반대 서명란
| 토론 게시판
+---+
GNU
+
| GNU 선언문
| GNU GPL
| GNU 미러 목록
+---+
프로젝트?
+
| 리눅스카운터
| RC5DES
| 실질헌법 제작
+---+
커널 소식
+
| 안정 버젼: 2.4.14
+---+
테마 선택
+
LSN 방송국?
+
| OFF AIR
+---+
회원
+
| 로그인
+---+
[ 적수네 동네 ] [ 리눅스 상표권 독점 반대 ] [ 한글 리눅스 문서 프로젝트 ] [ KrLine ] [ 사랑넷 ] [ Valid HTML 4.0! ] [ SlashDot ] [ Freshmeat ]
Copyleft (C) 1998-2001 Byeong-Chan Kim . License
TIME: 1789642019
System by WYZsoft, HDD by I.O.Linux, Mizi Research, Embryo, WOWLINUX, Domain by SarangNet, Network by KrLine.