Postfix errors from some new worm??

Nicole nmh at daemontech.com
Fri Apr 30 00:18:44 UTC 2004



 Seems like its trying to show web data.. and it ignores errors.
 I am seeing a bit of these. Nothing googelable for SHWAN-PROXY =[

 Some broken script or worm?

  Nicole


Transcript of session follows.

 Out: 220 krell.webweaver.net ESMTP commodore 64 Postfix Baby
 In:  POST / HTTP/1.0
 Out: 502 Error: command not implemented
 In:  Via: 1.0 SHWAN-PROXY
 Out: 502 Error: command not implemented
 In:  Host: mail.webweaver.net:25
 Out: 502 Error: command not implemented
 In:  Content-Length: 1056
 Out: 502 Error: command not implemented
 In:  Content-Type: text/plain
 Out: 502 Error: command not implemented
 In:  Connection: Keep-Alive
 Out: 502 Error: command not implemented
 In:
 Out: 500 Error: bad syntax
 In:  RSET
 Out: 250 Ok
 In:  HELO webtv.net
 Out: 250 krell.webweaver.net
 In:  MAIL FROM:<swe4etp07 at hotmail.com>
 Out: 250 Ok
 In:  RCPT TO:<nicole at webweaver.net>
 Out: 550 Client host rejected: cannot find your hostname, [207.68.98.5]
 In:  DATA
 Out: 554 Error: no valid recipients
 In:  To: <nicole at webweaver.net>
 Out: 502 Error: command not implemented
 In:  From: "roman" <jojo21planet at hotmail.com>
 Out: 221 Error: I can break rules, too. Goodbye.


--
                     |\ __ /|   (`\            
                     | o_o  |__  ) )           
                    //      \\                 
  -  nmh at daemontech.com  -  Powered by FreeBSD  -
------------------------------------------------------
 "The term "daemons" is a Judeo-Christian pejorative.
 Such processes will now be known as "spiritual guides"
  -Politicaly Correct UNIX Page

     http://www.nonsenseband.com

*** Spam Sucks and I get tons of it. So I have some tight spam filters.
     If any email to me bounces, please use your secret decoder ring
     and please send to blabgoo at yahoo dot com  :)




More information about the NANOG mailing list