Open relays and open proxies

Thu Apr 24 22:38:07 UTC 2003

-----BEGIN PGP SIGNED MESSAGE-----

On Thu, 24 Apr 2003, Adi Linden wrote:

> I am seeing an increasing number of hosts on our network become an open 
> proxy. So far the response to this has been reactive, once I receive 
> complaints from spam victims I deal with the source of the problem.

I see an increased number of proxy's being abused too. Unfortunately, I am
seeing them feeding mail servers to forge spams in my name. Most of them
are in argentina and brasil, but I also see crap from chinanet, taiwan, norway
and even just around the corner here in the NL.

However, do not mistake these machines for the funny small DDoS'es that might
happen on your server. Those are likely generated by silly spammers taking it
out on people who actually care about the state of the net by sending out
forged spam with 100+ embedded IFRAME's to your website.

I've been under attack for over two weeks now. Details have been put up at
http://www.xtdnet.nl/paul/spam/
If anyone is the traget of similar abuse, please contact me offlist and I'll
try to combine the data to see if we can pinpoint this to some person or group.

Paul
- -- 
Lawyer: "Now sir, I'm sure you are an intelligent and honest man--"
Witness: "Thank you. If I weren't under oath, I'd return the compliment."

		http://www.rinkworks.com/said/courtroom.shtml

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
Comment: Made with pgp4pine 1.75-6
Charset: noconv

iQCVAwUBPqhnbOwK68kOXjFBAQHcRQP/XJv1NmcU1wPhoXcb67gu0fPSlaM8tCkX
U0ZVXa9k6MTwLiUHTvA/ypQodhbJ6tJ4LoqaXtBjFfFyNi137JYFnhiU3W8z8eIv
D1l+5IoxCuigHIbCbZocWHVE2WsEZvmMe58NwqFK56Fl0QgtW6EYkZJRbYjRoQ6f
mKJE33cVq/4=
=K8BW
-----END PGP SIGNATURE-----